last executing test programs: 5m4.852650131s ago: executing program 0 (id=1242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x8c}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r8 = epoll_create(0xe000000) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000480)=""/109, 0x6d, 0x0, &(0x7f0000000640)=""/37, 0x25}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r11, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r12}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r12, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0xb, &(0x7f0000000240)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @func, @generic={0xc, 0x6, 0x0, 0x9, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x71, &(0x7f0000000340)=""/113, 0x0, 0x40, '\x00', r6, @fallback=0x16, r7, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xc, 0x0, 0xcd}, 0x10, r9, r11, 0x6, &(0x7f0000000740)=[r12, r13, r14], &(0x7f0000000780)=[{0x3, 0x1, 0x9, 0x6}, {0x2, 0x1, 0x7, 0x5}, {0x4, 0x3, 0xa}, {0x0, 0x1, 0xd, 0x8}, {0x4, 0x2, 0x4, 0x6}, {0x2, 0x5, 0x8, 0x3}], 0x10, 0x7}, 0x94) 5m4.669175723s ago: executing program 0 (id=1246): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x3a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x100) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCSFLAGS(r5, 0x40047459, 0x0) 5m4.084183701s ago: executing program 3 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) close(r4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r5}, &(0x7f00000014c0), &(0x7f0000001500)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019980)={r4, 0x0, 0xd9, 0xd0, &(0x7f00000195c0)="17b5464657d50c9d2ba818919ea44067e326791b51c2927776de5dcbf5a4985cddfcd8308e5c62a277e833a1600b08918e5587db2fcc7f528140b1bbaea4332fde4430111d4a1c4269109ac8743bd2ac0c3683e91b1d3cfa237ebb0c3af49776900b44d45186cf8522c09c87459bbc97ffe48be592d3587fe90b59124c0b355ec07a2d58255003d1db935bde70aaee983e64a98f3e7f44d132ee1b51a0d6002b4d413974225390b31b01596960311bb2872f6305daec4f23e7b8b95724e7bab30beb4500dc29ec468a368d59ad8a3a07c63cee72467b9e251f", &(0x7f00000196c0)=""/208, 0x2, 0x0, 0xa4, 0xeb, &(0x7f00000197c0)="5f02ad259846d01e1c3866f8980d829e89a53d520da0594bad92fe3d180986e8233dbb893197e1a17a7f63e70681f32b2ad600f33548c48a04d8ee0c183a43b42151f67ed25ad8bab1ecfe9bfbd318a1af4890398b5ab7d03b5d62e102ba9e13fd1ee5755fb204cadfeda2ceb1998f483f65fa2393c0dc1608b63b5f5cf4be3f4c95951667158bd97b3da4cb9440f605e13b64e53b4109c99c95f39e1c796260133cb321", &(0x7f0000019880)="cc40864c67ba71d772a869ed683221c432eb5c4b10f3ef6853045cbf2faf8facc38c5c3a18261a3015266dc2d4c03f4b821d06a2406d98dd181d4c3025e3335c6bd3aca7fdf657070675272795ae518583637c619803e6ac4b14613555fc3557b5033107e9b717f62a3dd6f79ee71c1be25deba54ad2fec27ec3021268a4a07549603a360dd3bc72c8767b20113fc1f2ed2a1a7e898d0cc374044f1604151fa4573f3ec82a718211bf0f29cfbb61542fcdcad902e864a289584dc186ea26ba10d1be6ecb500c986834b9cdf22afd3e500eeab8045814f7f16555dd90a23b255e8057709961d8774680d1c4", 0xa, 0x0, 0x6}, 0x50) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c0000ae92f016a62605bd0000000000057c0000080001801716c2e9"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r7, 0x0, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000019580)={'pim6reg0\x00', {0x2, 0x4e23, @broadcast}}) (async) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="50000000010000000000e0c700f0bc03d91e", @ANYRES32=0x0, @ANYBLOB="2b030000008002001c00128009000100626f6e64000000000c000280080008807f00000114003500626f6e643000"/56], 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x0, 0x0, 0xfffffffe}, 0x10) (async) r11 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async) getsockopt(r11, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000291c80ce7695c73188c4d70c8fe5ebb48fd163c2d8ef05c423576eea74c932935340cf9737847c7c09aa001c4da5649c6c7652f43e44d8a29e0066c67e63e691b9315f66aefe6a09c2fad8dc3c", @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c00090003000000ff03000008001b0000000000"], 0x3c}}, 0x0) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r6) (async, rerun: 64) ioctl(r7, 0xfffffffa, &(0x7f0000019a00)="ebd2fe02fb95000498688293dd0a858ffe7f3deabbcaa15b03ec455dfb6bb7e5ac9082704785e73eb50686cb532ab1719c363c7ff68067a0316c212a4f7c580a4603baf18dc23071fcbbc64292242b8fe69324704ed62db52f7e49232b394abaf0f2f8f8517c4cfd0f72d4add7d8aecee7eacb22fcc45c0413462253d3999bb4bd05579e996e7c2831e0ba770052") (rerun: 64) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r11, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2d000009}, 0xc, &(0x7f00000002c0)={&(0x7f0000019ac0)=ANY=[@ANYBLOB="88010000", @ANYRES16=r12, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4048001}, 0x80) 5m3.941395062s ago: executing program 3 (id=1255): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) 5m3.912801148s ago: executing program 3 (id=1256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000d451ff31c66d85e019a41335bfc31a020000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085114b3e3aeac5a0245b727ba1e95bc3c9e5bde7be316a25aef251c7ca904388a0dea525b764460d163b"], &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}, 0x8}, 0x1c) r4 = socket(0x840000000002, 0x3, 0xff) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x1000}, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r10, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r10, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) listen(r10, 0xffffffff) setsockopt$inet_int(r7, 0x0, 0x33, 0x0, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) close(r6) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private0}, &(0x7f00000000c0)=0x14) 5m3.6771501s ago: executing program 0 (id=1261): syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) readv(r0, &(0x7f0000000580)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c840) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x15}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) 5m3.529230129s ago: executing program 3 (id=1264): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) write(r1, &(0x7f0000000080)="5a000300010003", 0x7) 5m3.518718404s ago: executing program 0 (id=1265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x10, 0x9}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x3114}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549", @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) 5m3.392926544s ago: executing program 3 (id=1266): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x10}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xb}}]}, 0x50}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000b0000104000001000000000021000000", @ANYRES32=0x0, @ANYBLOB="7bbf0100000000001c0012800800010067726500100002800400120008000700e0000001"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 5m3.233284675s ago: executing program 0 (id=1267): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xe4e, 0x4) (async) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)={0x2, 0x5, 0x0, 0x9, 0x2, 0x0, 0x0, 0x3}, 0x10}}, 0x804) recvmmsg(r0, &(0x7f0000001840)=[{{&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000580)=[{&(0x7f00000018c0)=""/137, 0x89}, {&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/10, 0xa}], 0x7}, 0x3}, {{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/102, 0x66}, {&(0x7f0000000700)=""/110, 0x6e}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x3, &(0x7f00000017c0)=""/89, 0x59}, 0x7}], 0x2, 0x10, 0x0) 5m2.892097446s ago: executing program 0 (id=1271): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000000000001000000000a"], 0xc0}}, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a9c116931056f1711e32cca6d096c6da19883c03b9f6cac8792056286dcfc066"}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) 5m2.859633048s ago: executing program 3 (id=1272): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140)="fb0d0254d60bf9623df8cd0c761b943a80fe36a8063ede21d2bcb832479795fc03cd0b10c71a0bbd98b5655396d52b7a3c1663d817aafc6d2d3f6cbcacca13425fe13b618b9c46af5bf70bb95381b3bbeb9eafe9419430b9c0de2dd534194b9966dc2ee61ae451a87e1c0da76782ed05e9df", &(0x7f00000001c0)=@tcp6=r1}, 0x20) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x3}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x3}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x9, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 5m2.618198126s ago: executing program 32 (id=1271): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000000000001000000000a"], 0xc0}}, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a9c116931056f1711e32cca6d096c6da19883c03b9f6cac8792056286dcfc066"}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) 5m2.544990505s ago: executing program 33 (id=1272): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140)="fb0d0254d60bf9623df8cd0c761b943a80fe36a8063ede21d2bcb832479795fc03cd0b10c71a0bbd98b5655396d52b7a3c1663d817aafc6d2d3f6cbcacca13425fe13b618b9c46af5bf70bb95381b3bbeb9eafe9419430b9c0de2dd534194b9966dc2ee61ae451a87e1c0da76782ed05e9df", &(0x7f00000001c0)=@tcp6=r1}, 0x20) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x3}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x3}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x9, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 18.740926115s ago: executing program 5 (id=5572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3e9534c8c815321bfa039fb8abeeca70d81103766a89da620b3aa32e544d081a0e9d9934beabb7565801b964acd7ce79adb68f4f8bfdcae0d62913802d915e55e492d6c601867cb3e79a5c8c17a8228836fcd33a8aa4856c85af163cda65ada2398779b771e24332c48afeb23d73b7b1868d46abc5e40b834948521d3cd062cd7038ea575ab5e451bc83ea238454078800d944ea44730a5240d919ce56f07d936c004b3f7eeb4d7fc20634be473ae6da9e256f9b0ba413f263e115b484d70440039481975c779dad14469934eaaf4e5c86adb8c3bf91664fa5d7ed15b2bc9bfafed364f82a8f6ede95ab91de538f26b57647e2b465caac863d", @ANYRES16=r1, @ANYBLOB="df4800000000000000000c000000180003801000038003fe018005000200000000000400010018000180140002007369743000"/62], 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca057134ec3f0a1c, 0x0}, &(0x7f0000000480)=0x40) 18.495883301s ago: executing program 5 (id=5577): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @broadcast}, {0x2, 0x1, @remote}, {0x2, 0x0, @broadcast}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x18}}, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000040)=0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xa2, &(0x7f00000008c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x10c, 0x30, 0x53b, 0x0, 0x1, {}, [{0xf8, 0x1, [@m_simple={0xf4, 0x1c, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x2d, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0xa2, 0x6, "800cd0f235e8aef25cd8a34aea28e5661442dfec20f23ba5d1d2d029a621d3cb2a36dddbac99709bad663e0612c0a0ddd9aedc208c28ca4e7842ae5e3c3f3ddf3205dcc0d6f41e538557eff4e2784bf3fa3a40b28a6b17085403784be1145ba8bfac20ed5732131edaefd711befde5e2d627b5b60081d3f595d9349418bc8200ef03a8fc02aea3e199a52c87d3a4ce5fcef7f817310fd26964e4e9921dd5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100008000000000000000000000000000000000c26341514124d06a1d81f85cdf205f3fcabbce861cd712a64e241feaf2d7d15edf1426e95f5848655d4a57464ef8daf4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd25, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xd, 0xffff}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40008d4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 18.293279413s ago: executing program 1 (id=5580): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r1 = socket(0xa, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f00000001c0), 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c0001007261746565737400490003007e6b92c4327e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b810000000900010073797a30000000000900020073797a320000000014000000110020"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x62}, 0x14) 18.104354299s ago: executing program 1 (id=5582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x35}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x76}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000008054000000060a09040000000000000001020000000900010073797a30000000000900020073797a320028000480240001800b0001006578746840000000010800044000000038140000001100010000000500000000000000000a000000"], 0x7c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000002c0)=0xf) 18.029469481s ago: executing program 5 (id=5584): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xb) setsockopt$inet6_tcp_int(r3, 0x6, 0xdb12a9e8eb45100c, &(0x7f0000000080), 0x4) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d8130fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x880) 17.905151174s ago: executing program 1 (id=5588): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x1, 0x6, 0x7, 0x2}, {0x3, 0x8, 0xd, 0x6}, {0x5, 0x5, 0x40, 0x2}, {0x7, 0x6f, 0x40, 0x9}]}) r2 = openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000001c0), 0x9) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"dc968cc135926e5b952a6dd63b57c4ac", 0x0, 0x0, {0xe, 0x5}, {0x0, 0x3ff}, 0x5, [0x8000000000000001, 0x3, 0x800, 0x1, 0x1, 0x0, 0x1, 0x9, 0x2, 0x7, 0xf2e, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1, 0x7]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000780)={{r2}, r3, 0x8, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0xa6, 0xfffffffffffffff4, {0x29, 0x7ff, 0x9, 0x101, 0x5b}, [0x7, 0x3, 0x101]}}, @devid=r4}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000001780)) recvmsg$unix(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/120, 0x78}, {&(0x7f0000002840)=""/202, 0xca}, {&(0x7f0000002940)=""/2, 0x2}, {&(0x7f0000002980)=""/1, 0x1}], 0x5, &(0x7f0000002a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40002003) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000002ac0), 0x4) openat$cgroup_procs(r7, &(0x7f0000002b00)='tasks\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000002b40)=0x4ad, 0x1) write$cgroup_type(r1, &(0x7f0000002b80), 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000002bc0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7f}, 0x1c) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x20, 0x1402, 0x200, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40088c8}, 0x2004044) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r9, 0x104, 0x4, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) ioctl$sock_proto_private(r5, 0x89e9, &(0x7f0000002d80)="1f7c310868b1bfe5b26c6f6da96835117a9b092cd9006f12068202d0c12ac15b0e9e7f92122b2d22834fe74f717c782a7978ebeda46b82b8611f38e2d6d604e4213a03fca2922b2ecc8e22ad4242a5bf625dc51b7c6819dbfe0b7c3f731f7ebb6956a138e96440bba1703c6176cab34c7ed51f4989051818ceca014e834c27337236695f9057db9a8f35c331505b1fe859aab9306479d16c72a89dccaa6575fc616bcb8de532d94c12ef7363da4ebb5f84fcfd2a84b3eb4528c3a3d19c8fc170466e9e2f8a8bdf94e38eaab25a4dbb78c90f2e6085ba5e38bf7cd8d9c1c3c346c4d88aa5094239") setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000002f00)=@nat={'nat\x00', 0x1b, 0x5, 0x448, 0x0, 0x290, 0xffffffff, 0x0, 0x198, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, &(0x7f0000002e80), {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x21, 0xd, 0x9}}, @common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key=0x2ae3, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xa, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e23, @port=0x4e20}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x408, 0x1, 0x1}}, @common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @broadcast, @loopback, @gre_key=0x8001, @port=0x4e22}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0xa}, 0xff, 0xffffffff, 'bridge_slave_1\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x32, 0x2, 0x50}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}, {[0x4e, 0x7ff]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x5, 0x7, [0x23, 0x2d, 0x3a, 0x3d, 0x35, 0x26, 0x28, 0x26, 0x0, 0x27, 0x25, 0xd, 0x39, 0x3e, 0x11, 0x13], 0x0, 0x7ff, 0x100000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f00000033c0), &(0x7f0000003400)=0x4) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000003440), &(0x7f0000003480)=0x4) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003500), r7) sendmsg$L2TP_CMD_NOOP(r8, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x14, r10, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4004841) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000003640)={0x4, 0x20, [0x5, 0x0, 0x9], &(0x7f0000003600)=[0x0, 0x0, 0x0, 0x0]}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000003700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x2a0, 0x360, 0x2a0, 0x1c8, 0x0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, &(0x7f0000003680), {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x81, 0x7]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xff000000, 0xff000000, 0xff000000, 0xffffffff], 0x8, 0x4e20, 0x4e22, 0x4e21, 0x3, 0x2, 0x8, 0x6, 0x8}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x3, 0x76}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x400, 0x8, @ipv4=@multicast2, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x2, 0x2}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x421, 0x962, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 0x6, 0xc, [0x17, 0x15, 0x2d, 0x1b, 0x4, 0x11, 0x2, 0x28, 0x3b, 0x32, 0x3c, 0x32, 0x37, 0x7, 0x1e, 0x25], 0x2, 0x5, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) 17.788238957s ago: executing program 1 (id=5590): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111d4000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) 17.683825499s ago: executing program 6 (id=5593): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:', @ANYRESOCT=r1], 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000780), &(0x7f00000007c0)=0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x20002, @loopback, 0x4}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4000090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r9, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair(0xb, 0x2, 0xfffffff9, &(0x7f0000000800)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x2, 0x2) recvmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000180)=@tipc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000340)=""/146, 0x92}, {&(0x7f0000000600)=""/140, 0x8c}, {&(0x7f0000000000)=""/43, 0x2b}], 0x4}, 0x40000020) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r11, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmmsg$inet(r4, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) 17.637883169s ago: executing program 1 (id=5594): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16, @ANYRES8=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x5, 0x0, 0x9, 0x45008, r0, 0x2bc5, '\x00', 0x0, r5, 0x3, 0x0, 0x0, 0x400000000006}, 0x50) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0xfffff000, 0x47, 0x0, &(0x7f0000000180)="61df7100c80420d5729fbbb64ae36c1fa190a470e864ba84b0adff80878e2e44a05e41f89452369009924f23be3cb39a7a8daac32a1039eed43d2c9781da759f6484b39eeca1d9", 0x0, 0x28000000, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000}, 0x50) 17.489347553s ago: executing program 4 (id=5595): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002042, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) 17.4496636s ago: executing program 1 (id=5597): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) (async) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x4000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x20, 0x8, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x4) 17.397237229s ago: executing program 4 (id=5598): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0400, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000440)={0x7, &(0x7f0000000400)=[{0x6, 0x5, 0x1}, {0x101, 0x9, 0x8, 0xa}, {0xaa, 0x3, 0x1, 0x5}, {0x1, 0x5, 0x79, 0x200}, {0x5, 0x9, 0x1, 0x106}, {0x1, 0xf2, 0x7, 0xbe53}, {0x1, 0x9, 0xfa, 0x6}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c000900"], 0x30}}, 0x0) unshare(0x600) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000006800040025bd7002ffdb080001000200000004000400040004000800010001000000080001000200000004000b0008000100"/68], 0x44}, 0x1, 0x0, 0x0, 0x4044811}, 0xbc25d4dc334e9d0e) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}], 0x2, 0x4004051) setsockopt(r8, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) socket$igmp(0x2, 0x3, 0x2) sendmmsg$sock(r7, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="74b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x20000000) 17.378865126s ago: executing program 6 (id=5599): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 17.30896297s ago: executing program 2 (id=5600): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0xff}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 17.237374747s ago: executing program 4 (id=5601): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a3100000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 17.191454716s ago: executing program 2 (id=5602): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00', 0x0}) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x29, 0xdf, 0x6, 0x201d, 0x40, @dev={0xfe, 0x80, '\x00', 0x29}, @empty, 0x8, 0x10, 0xb, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', r1, 0x7800, 0x700, 0x0, 0xc, {{0x13, 0x4, 0x0, 0x8, 0x4c, 0x68, 0x0, 0x4, 0x3f, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x80, [@multicast2, @private=0xa010102, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1, @broadcast]}, @rr={0x7, 0x13, 0x37, [@remote, @private=0xa010100, @broadcast, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6c7181f40cd98aaa}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000080) close(r0) 17.17577346s ago: executing program 6 (id=5603): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) write(r0, &(0x7f0000000300)="1c0000001a005f0214f9f4070d0903001f000000fe05000000020000", 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) 17.101078932s ago: executing program 4 (id=5604): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x1, 0x5, 0x4, 0x2, 0x16, 0x4}}]}}]}, 0x150}}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendfile(r5, r5, &(0x7f0000000040)=0x8001, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x4}}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80200082}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xc8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006900030500000000000000000081"], 0x18}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x1}, @TCA_FQ_QUANTUM={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8804}, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001240)="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", 0x1000}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010102, @loopback}}}], 0x20}, 0x4040014) 17.097795315s ago: executing program 2 (id=5605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="405b6c018fc4947270e194faf8acf7de23360c3e76724c9dcf47f821488f4e0c13594a5da183f26c3cafcc85b0637cfb17df61c929be"], 0x28}, 0x1, 0x6c00}, 0x0) 17.009830868s ago: executing program 2 (id=5606): r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private1, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x20, 0x130, 0x33, 0x0, 0xee01}, {0x7, 0xfffffffffffffffc, 0x100, 0xfffffffffffffffa, 0x0, 0x7fff, 0xfc, 0x6}, {0x5, 0x6, 0x5, 0xb5}, 0x3, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in=@broadcast, 0x3505, 0x4, 0x0, 0x9d, 0x2, 0x9, 0xc}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001800010000000000000000000ae0"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newspdinfo={0x1c, 0x24, 0x401, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x81}}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac14141d000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000008000000000000000000000000000000000000000000000000f2f2bbfbde25bf0e0a0000000000000000000000000000000300"/112], 0xb8}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) 16.890348436s ago: executing program 5 (id=5607): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x1000}, 0x4) r2 = socket$caif_stream(0x25, 0x1, 0x5) connect$caif(r2, &(0x7f0000000000)=@rfm={0x25, 0x7, "a5d2f15bad74f43edea486d2603b6db4"}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 16.719095347s ago: executing program 6 (id=5608): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x8000) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 16.611574811s ago: executing program 4 (id=5609): r0 = socket(0x40000000015, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x7fffffff, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="4100f60001000000000000000001"], 0x80}}, 0x8004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x25, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010004b047d7b0000000000007a0000b6", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x10) 16.591077877s ago: executing program 2 (id=5610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x8, 0x1c, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f280db17ab50b5432b18faa02276ec9cd", 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 16.554847134s ago: executing program 6 (id=5611): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$key(0xf, 0x3, 0x2) getsockname(r1, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000300)=0x80) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r1}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000380)={0x4}, 0x4) r3 = epoll_create(0x3) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000003c0)={r1, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000004c0)=0x0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000540)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xfff, 0x2d}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff9, 0x18}}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x40) read(r2, &(0x7f00000006c0)=""/6, 0x6) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000700)={{r3}, "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"}) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r10, 0x106, 0x1, &(0x7f0000001700), 0x4) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000001740)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x1, 0x4, 0x2, 0x3, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}}}, 0x32) writev(r2, &(0x7f0000002ac0)=[{&(0x7f0000001780)="4cd9f5cdcfd062291b2bf245f87cd1e6774a8d9f38328611b79f43006cffbdd57e2560ffd3bd9715d889adbddf09cb", 0x2f}, {&(0x7f00000017c0)="1907a8ee60ad1b302e327858778f2dd43a05fdb5efb998f14edeb75a2bd797a751c6e9148ba55b482a13895e056694949721874df44176ac14c641da3ba64d25515af80474ac81b6f29ae5aed212cf1ea24cd74a9e5cf0", 0x57}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="24270c70191ed7ea3111cef97628f92023d06b00c4ce28b23f9589b39ff7b19b233f048327175342424b0bf83f409a755bae4d6d28485ab2d7cc87090c2c05bc628452cffceb0e92f71a6a8cb6c6df4a2b1c3b6a1dd37d7ebad2e810f7bc7b7f9d254702970d82e7c142e357ead67646c7c8002d40556b46f4f1d982433f4ad455f07d00fcd3ab5973c2bf53f2826f52b0fa86215cb20d44e959abd852fbf353ba297d73fb7c167c42ae08", 0xab}, {&(0x7f0000002900)="05", 0x1}, {&(0x7f0000002940)="93caaa814ef1abb68c2b8472b0ab32c173d42d01a3873253ad8c1971f1a94de9ec9f2f27028bed36c36c7bc73891b48e30fd9ddc955ea2dcd12a0103c748c1d4ce40164b59d10d8838c4ca4223b4e277ddb8833cd07a4af9ecf26e8d9f56af889076a86a4ea646f2c45198c71aa86af8954fcf7d62de8ad62804d21dc032c5aaeb12a5e78ff1e58a660a8f829d392b01cc46658a116654a6cb21a61ab129b5fbcdb589d95db8f01b7819e2200b10b2dd21cb29e1dbf3e77a1f2cbbeb6cc06540dad349d665bc850b072a15a9300348b87bdc3661ba207e49d3af528f9bbe58", 0xdf}, {&(0x7f0000002a40)="62d022cf4a45a577508ac5bfc0be63e09bced3b1dd59c24a45b46be906a4b0a5e05b01beb80927eaf3d16c1bb8c09b7f506ff5d35cc54a1f4a0ebed134a866b6ba28c8d6c0636e30019ea08f7051954b777cc74b7d710306b75c257eb2309423ad88c0193b60d4fca2f87ecbbc8402ae01c4cd2bbfe564358c029b21", 0x7c}], 0x7) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf0b}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r10, 0x8982, &(0x7f0000002c40)) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002cc0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x64, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x22}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x90000}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x414}, 0x4000000) r13 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000002e00)={r13}) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000002e40)) 16.461070675s ago: executing program 5 (id=5612): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0) 16.438524741s ago: executing program 4 (id=5613): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x10) 16.411279689s ago: executing program 2 (id=5614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa, 0xc}, {0x0, 0xfff1}, {0x3, 0x1c}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r5, 0x101, 0x19, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000001280)={0xfae, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000200)=0x1e) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="000088b831487f0542725ac256025d798ccfff277493", 0x16, 0x14000b01, &(0x7f0000000180)={0x11, 0x8100, r8, 0x1, 0x80}, 0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600040000040000060005"], 0x5c}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x400}) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe3a) 16.326361895s ago: executing program 5 (id=5615): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r3, &(0x7f0000001840)=""/4096, 0x1003, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) read(r3, &(0x7f0000000100)=""/221, 0xdd) (async) read(r3, &(0x7f0000000100)=""/221, 0xdd) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x5c}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)) syz_genetlink_get_family_id$team(&(0x7f0000000240), r7) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 16.325608178s ago: executing program 6 (id=5616): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), r3) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x74, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x8f0744bcd7215b}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000002080)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001cc0)={0x5c, r9, 0x404, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x5c}}, 0x100) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000002b40)={0x4f0, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_SDP={0x274, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0x7, 0x1, '\x1d@]'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x4}, {0x48, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, ':'}, {0x6, 0x1, '\xff\xff'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '\xff\xff'}, {0x4}, {0x6, 0x1, '\xff\xff'}, {0x7, 0x1, '{@#'}]}, {0x24, 0x0, 0x0, 0x1, [{0x9, 0x1, '{\\\xa0@#'}, {0xa, 0x1, '\xf2#\x17\'/]'}, {0x5, 0x1, '/'}]}, {0x10, 0x0, 0x0, 0x1, [{0x7, 0x1, 'i\')'}, {0x4}]}, {0x1a0, 0x0, 0x0, 0x1, [{0x6, 0x1, ':,'}, {0x6, 0x1, ']-'}, {0x6, 0x1, '\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x15a, 0x1, '\x00Rk\t`\xb4\xb5\v\xc3\x01\x8f\x7f\xfdq\x19r\x9d\xeew\x0e\x81\xfaw\xe6\xb7\ng\xaaR\r\xbc\x8c(\xa1\x96\x81H\x93e\xd1\'\x1c\xa7\x1a\xd4\x13\xc2\xf7\xd6b\x87\xe1\xb5\x0e6\xb5\xb3\v!\xa4\xfeR\x11r\x84\x8a\xe6,\x85\xe6\xaf\xc2Ob\x8a8\x1c\xc2\x19\x06\xe3\x03\xc2M\xe2#y\xda\xc0v\xc5\x1e\\\\IQ\x84\x1am\x95D\xd4\x13\xba\xee[\xe1\xb5\x83\x0e\x99>\xed\xc2\xa6\xebJ\xdf_W\x15_\xf4\fG\x88O\xf1e)o\"d\xfe\xec\xc4\xf35\x03\x1b\xc2\xe4\x95\xc2|\xa4\xce\xe4\xcb\xb8$\xc3c1\xaf\x1aX1\xd3{\x90\xdd\xe0\xc4\x9cA\"\xf0y\xbc\xb6\xf6\x8ay\xa9nq\x91,\xbd\xe0\xbb\x9e}%\x1c\xe0\fb\x02&\x13*\xe2\xfdy\xc1\xcc\x00W]\x0e\xa0\xb1\x87\xfe\x93\x7fr,[\b\x1b\xb6\xab\xc9\x96\at\xbb\xba\xb0\xc6\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\'\xad\xc4s|P\xba7\xb6\x03\x17\xc4\xce\r8_}\fQ$\xc5eB\x806\xee\x16-\x0f\xcb\xc0\x9a\x14\xa1\x9a\x9a\xfb\x9f\x97\x05\xda\x94\x93\x1c\xd5\x9d\xf4\x98\xb9>\xfe\x9a\x8e\xf37>)\xe6#\xe8\xc8\xee\xc2<\x0e\xa96M$\x86~(\xc3*w\xf3\x839/\xca'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '\xff\xff'}, {0x7, 0x1, '^(}'}]}, {0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '[%{}%{'}, {0x6, 0x1, '\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}, {0x4}, {0x8, 0x1, '@+%('}]}, {0x4}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_LLC_SDP={0x240, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0xb, 0x1, '-(!+/:&'}, {0xc, 0x1, ',{^\'+\'({'}]}, {0x38, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '\xa7%'}, {0x5, 0x1, '\x00'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0xac, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '\xff\xff'}, {0x8, 0x1, '[^#\\'}, {0x88, 0x1, '\xdbh*K\x15\xc8l\xf4\xd5\xda&\xc2\xbe\x15\xea\x82\xe3s*\xd9\xfa\x15\xa2\x87(\b(A\\p\xb4\x8d^\xbdf*\xed\x91\x93\xed\xe3\xf8\x85u\x95\xc7\xa0\xc1\xb5$\xcc\xe6\b\x9c\x9d\xf3X\x94\xc1l\x94\bu\xe8\x81[&\x7f6\x80\xdc|I\xfaF5\xe9h\x0e\x91\x8eit\xd2\xa3jdS\xa0\x00\xbfP\xfc\xe1iCx4\xb0\x89\x1a\x02\x92\x01\x8c\t)\x86\xe35\x88\xad\xd5q^\xd3\n\x11\xbb9\xff\x16\xa1:3\x80\b\x88\xf9\x1e?\x97'}, {0x6, 0x1, '@%'}]}, {0x20, 0x0, 0x0, 0x1, [{0x6, 0x1, '\xff\xff'}, {0x8, 0x1, '.(}*'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x30, 0x0, 0x0, 0x1, [{0x6, 0x1, '\xff\xff'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, '\x00'}, {0x9, 0x1, '-]!\'/'}]}, {0x54, 0x0, 0x0, 0x1, [{0x6, 0x1, '\xff\xff'}, {0x6, 0x1, '\xff\xff'}, {0xa, 0x1, '%+]\'/*'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '\xff\xff'}, {0x6, 0x1, '\xff\xff'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '[:$'}, {0x5, 0x1, ','}]}, {0x8, 0x0, 0x0, 0x1, [{0x4}]}, {0x3c, 0x0, 0x0, 0x1, [{0x11, 0x1, '+$,/^\'\xb1\\&F.+:'}, {0x4}, {0x5, 0x1, '\x00'}, {0x6, 0x1, '\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}]}, {0x4}, {0x50, 0x0, 0x0, 0x1, [{0x6, 0x1, '\xff\xff'}, {0x5, 0x1, '\x00'}, {0x4}, {0x6, 0x1, '\xff\xff'}, {0x5, 0x1, '\''}, {0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x11, 0x1, '+$,/^\'\xb1\\&F.+:'}, {0x8, 0x1, '\'))+'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040040) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f0000001a00)=""/205, 0xcd}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f00000007c0)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/4062, 0xfde}, {&(0x7f0000001b00)=""/210, 0xd2}, {&(0x7f0000001880)=""/131, 0x83}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000880)=""/4089, 0xff9}, {&(0x7f00000004c0)=""/235, 0xeb}], 0xa}, 0x0) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r15, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x811f}, @in6={0xa, 0x4e24, 0x9, @empty, 0x2}, @in={0x2, 0x4e23, @remote}], 0x64) r16 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) bind$packet(r16, &(0x7f0000000340)={0x11, 0x10, r17, 0x1, 0x89, 0x6, @broadcast}, 0x14) setsockopt(r15, 0x84, 0x81, &(0x7f0000000240)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r15, 0x84, 0x15, &(0x7f00000002c0)={0x2}, 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r15, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x0, 0x3, 0x7]}, &(0x7f0000000100)=0xa) 310.653935ms ago: executing program 34 (id=5615): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r3, &(0x7f0000001840)=""/4096, 0x1003, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) read(r3, &(0x7f0000000100)=""/221, 0xdd) (async) read(r3, &(0x7f0000000100)=""/221, 0xdd) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x5c}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)) syz_genetlink_get_family_id$team(&(0x7f0000000240), r7) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 263.694829ms ago: executing program 35 (id=5597): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) (async) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x4000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x20, 0x8, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x4) 200.221264ms ago: executing program 36 (id=5614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa, 0xc}, {0x0, 0xfff1}, {0x3, 0x1c}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r5, 0x101, 0x19, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000001280)={0xfae, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000200)=0x1e) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="000088b831487f0542725ac256025d798ccfff277493", 0x16, 0x14000b01, &(0x7f0000000180)={0x11, 0x8100, r8, 0x1, 0x80}, 0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600040000040000060005"], 0x5c}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x400}) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe3a) 98.192363ms ago: executing program 37 (id=5616): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), r3) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x74, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x8f0744bcd7215b}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000002080)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001cc0)={0x5c, r9, 0x404, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x5c}}, 0x100) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000002b40)={0x4f0, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_SDP={0x274, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0x7, 0x1, '\x1d@]'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x4}, {0x48, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, ':'}, {0x6, 0x1, '\xff\xff'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '\xff\xff'}, {0x4}, {0x6, 0x1, '\xff\xff'}, {0x7, 0x1, '{@#'}]}, {0x24, 0x0, 0x0, 0x1, [{0x9, 0x1, '{\\\xa0@#'}, {0xa, 0x1, '\xf2#\x17\'/]'}, {0x5, 0x1, '/'}]}, {0x10, 0x0, 0x0, 0x1, [{0x7, 0x1, 'i\')'}, {0x4}]}, {0x1a0, 0x0, 0x0, 0x1, [{0x6, 0x1, ':,'}, {0x6, 0x1, ']-'}, {0x6, 0x1, '\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x15a, 0x1, '\x00Rk\t`\xb4\xb5\v\xc3\x01\x8f\x7f\xfdq\x19r\x9d\xeew\x0e\x81\xfaw\xe6\xb7\ng\xaaR\r\xbc\x8c(\xa1\x96\x81H\x93e\xd1\'\x1c\xa7\x1a\xd4\x13\xc2\xf7\xd6b\x87\xe1\xb5\x0e6\xb5\xb3\v!\xa4\xfeR\x11r\x84\x8a\xe6,\x85\xe6\xaf\xc2Ob\x8a8\x1c\xc2\x19\x06\xe3\x03\xc2M\xe2#y\xda\xc0v\xc5\x1e\\\\IQ\x84\x1am\x95D\xd4\x13\xba\xee[\xe1\xb5\x83\x0e\x99>\xed\xc2\xa6\xebJ\xdf_W\x15_\xf4\fG\x88O\xf1e)o\"d\xfe\xec\xc4\xf35\x03\x1b\xc2\xe4\x95\xc2|\xa4\xce\xe4\xcb\xb8$\xc3c1\xaf\x1aX1\xd3{\x90\xdd\xe0\xc4\x9cA\"\xf0y\xbc\xb6\xf6\x8ay\xa9nq\x91,\xbd\xe0\xbb\x9e}%\x1c\xe0\fb\x02&\x13*\xe2\xfdy\xc1\xcc\x00W]\x0e\xa0\xb1\x87\xfe\x93\x7fr,[\b\x1b\xb6\xab\xc9\x96\at\xbb\xba\xb0\xc6\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\'\xad\xc4s|P\xba7\xb6\x03\x17\xc4\xce\r8_}\fQ$\xc5eB\x806\xee\x16-\x0f\xcb\xc0\x9a\x14\xa1\x9a\x9a\xfb\x9f\x97\x05\xda\x94\x93\x1c\xd5\x9d\xf4\x98\xb9>\xfe\x9a\x8e\xf37>)\xe6#\xe8\xc8\xee\xc2<\x0e\xa96M$\x86~(\xc3*w\xf3\x839/\xca'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '\xff\xff'}, {0x7, 0x1, '^(}'}]}, {0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '[%{}%{'}, {0x6, 0x1, '\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}, {0x4}, {0x8, 0x1, '@+%('}]}, {0x4}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_LLC_SDP={0x240, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0xb, 0x1, '-(!+/:&'}, {0xc, 0x1, ',{^\'+\'({'}]}, {0x38, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '\xa7%'}, {0x5, 0x1, '\x00'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0xac, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '\xff\xff'}, {0x8, 0x1, '[^#\\'}, {0x88, 0x1, '\xdbh*K\x15\xc8l\xf4\xd5\xda&\xc2\xbe\x15\xea\x82\xe3s*\xd9\xfa\x15\xa2\x87(\b(A\\p\xb4\x8d^\xbdf*\xed\x91\x93\xed\xe3\xf8\x85u\x95\xc7\xa0\xc1\xb5$\xcc\xe6\b\x9c\x9d\xf3X\x94\xc1l\x94\bu\xe8\x81[&\x7f6\x80\xdc|I\xfaF5\xe9h\x0e\x91\x8eit\xd2\xa3jdS\xa0\x00\xbfP\xfc\xe1iCx4\xb0\x89\x1a\x02\x92\x01\x8c\t)\x86\xe35\x88\xad\xd5q^\xd3\n\x11\xbb9\xff\x16\xa1:3\x80\b\x88\xf9\x1e?\x97'}, {0x6, 0x1, '@%'}]}, {0x20, 0x0, 0x0, 0x1, [{0x6, 0x1, '\xff\xff'}, {0x8, 0x1, '.(}*'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x30, 0x0, 0x0, 0x1, [{0x6, 0x1, '\xff\xff'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, '\x00'}, {0x9, 0x1, '-]!\'/'}]}, {0x54, 0x0, 0x0, 0x1, [{0x6, 0x1, '\xff\xff'}, {0x6, 0x1, '\xff\xff'}, {0xa, 0x1, '%+]\'/*'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '\xff\xff'}, {0x6, 0x1, '\xff\xff'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '[:$'}, {0x5, 0x1, ','}]}, {0x8, 0x0, 0x0, 0x1, [{0x4}]}, {0x3c, 0x0, 0x0, 0x1, [{0x11, 0x1, '+$,/^\'\xb1\\&F.+:'}, {0x4}, {0x5, 0x1, '\x00'}, {0x6, 0x1, '\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}]}, {0x4}, {0x50, 0x0, 0x0, 0x1, [{0x6, 0x1, '\xff\xff'}, {0x5, 0x1, '\x00'}, {0x4}, {0x6, 0x1, '\xff\xff'}, {0x5, 0x1, '\''}, {0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x11, 0x1, '+$,/^\'\xb1\\&F.+:'}, {0x8, 0x1, '\'))+'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040040) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f0000001a00)=""/205, 0xcd}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f00000007c0)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/4062, 0xfde}, {&(0x7f0000001b00)=""/210, 0xd2}, {&(0x7f0000001880)=""/131, 0x83}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000880)=""/4089, 0xff9}, {&(0x7f00000004c0)=""/235, 0xeb}], 0xa}, 0x0) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r15, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x811f}, @in6={0xa, 0x4e24, 0x9, @empty, 0x2}, @in={0x2, 0x4e23, @remote}], 0x64) r16 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) bind$packet(r16, &(0x7f0000000340)={0x11, 0x10, r17, 0x1, 0x89, 0x6, @broadcast}, 0x14) setsockopt(r15, 0x84, 0x81, &(0x7f0000000240)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r15, 0x84, 0x15, &(0x7f00000002c0)={0x2}, 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r15, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x0, 0x3, 0x7]}, &(0x7f0000000100)=0xa) 0s ago: executing program 38 (id=5613): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): 360][T19473] bridge0: port 3(ipvlan0) entered disabled state [ 457.054388][T19473] ipvlan0: entered allmulticast mode [ 457.060599][T19473] bridge0: entered allmulticast mode [ 457.071601][T19473] ipvlan0: left allmulticast mode [ 457.077968][T19473] bridge0: left allmulticast mode [ 457.110758][T19471] bridge0: port 3(ipvlan0) entered blocking state [ 457.117387][T19471] bridge0: port 3(ipvlan0) entered disabled state [ 457.124402][T19471] ipvlan0: entered allmulticast mode [ 457.129754][T19471] bridge0: entered allmulticast mode [ 457.138748][T19471] ipvlan0: left allmulticast mode [ 457.144028][T19471] bridge0: left allmulticast mode [ 457.181760][T19465] wg1 speed is unknown, defaulting to 1000 [ 457.486138][T19494] netlink: 'syz.5.3889': attribute type 12 has an invalid length. [ 457.523373][T19492] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3886'. [ 457.544927][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3886'. [ 457.771479][T19506] tipc: Enabling of bearer rejected, already enabled [ 457.991607][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3897'. [ 458.027722][T19476] infiniband syz0: set down [ 458.032822][T19476] infiniband syz0: added ipvlan0 [ 458.052463][T19476] syz0: rxe_create_cq: returned err = -12 [ 458.078108][T19476] infiniband syz0: Couldn't create ib_mad CQ [ 458.086944][T19476] infiniband syz0: Couldn't open port 1 [ 458.113487][T19529] syzkaller1: entered promiscuous mode [ 458.125980][T19529] syzkaller1: entered allmulticast mode [ 458.143122][T19536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.165642][T19476] RDS/IB: syz0: added [ 458.170181][T19476] smc: adding ib device syz0 with port count 1 [ 458.178260][T19476] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 458.188193][T19524] syzkaller0: entered promiscuous mode [ 458.193668][T19524] syzkaller0: entered allmulticast mode [ 458.699514][T19568] tun0: tun_chr_ioctl cmd 1074025675 [ 458.706869][T19568] tun0: persist disabled [ 459.054446][T19579] xt_hashlimit: size too large, truncated to 1048576 [ 459.139704][T19581] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3912'. [ 459.364162][T19593] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3916'. [ 459.388755][T19593] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 459.408238][T19593] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 459.426987][T19593] tipc: Resetting bearer [ 459.523518][T19601] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3919'. [ 459.697629][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3923'. [ 460.079509][T19632] openvswitch: netlink: Message has 6 unknown bytes. [ 460.169793][T19644] netlink: 'syz.2.3930': attribute type 2 has an invalid length. [ 460.183790][T19643] netlink: 'syz.2.3930': attribute type 2 has an invalid length. [ 460.251667][T19643] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 460.265522][T19643] bond3 (unregistering): Released all slaves [ 460.317685][T19644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.351084][T19653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.476769][T19662] macvlan1: entered promiscuous mode [ 460.483525][T19662] macvlan1: entered allmulticast mode [ 460.490266][T19662] veth1_vlan: entered allmulticast mode [ 460.830644][ T9625] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.211198][T19706] __nla_validate_parse: 11 callbacks suppressed [ 461.211224][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3948'. [ 461.264346][T19706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3948'. [ 461.327967][T19711] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3949'. [ 461.340238][T19712] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3949'. [ 461.507715][T19724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3952'. [ 461.681409][T19711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.696413][T19711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.706899][T19711] bond0 (unregistering): Released all slaves [ 461.729054][T19723] gtp0: entered promiscuous mode [ 461.734747][T19723] gtp0: entered allmulticast mode [ 461.784882][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3955'. [ 461.793771][T19730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.844049][T19730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.867938][T19730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.894389][T19730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.018362][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3959'. [ 462.048607][T19740] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 462.070712][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3959'. [ 462.114966][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3959'. [ 462.155788][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3959'. [ 462.905175][T19772] bridge13: entered promiscuous mode [ 462.910506][T19772] bridge13: entered allmulticast mode [ 462.925780][T19772] team0: Port device bridge13 added [ 462.935238][T19772] bridge0: port 1(team0) entered blocking state [ 462.943421][T19772] bridge0: port 1(team0) entered disabled state [ 462.953325][T19772] team0: entered allmulticast mode [ 462.965357][T19772] team_slave_0: entered allmulticast mode [ 462.971094][T19772] team_slave_1: entered allmulticast mode [ 462.986104][T19772] team_slave_0: entered promiscuous mode [ 462.992062][T19772] team_slave_1: entered promiscuous mode [ 462.999683][T19772] bridge0: port 1(team0) entered blocking state [ 463.006038][T19772] bridge0: port 1(team0) entered forwarding state [ 463.329134][T19802] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.351433][T19802] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 463.370528][T19802] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 463.437246][T19802] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.450318][T19802] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 463.461005][T19802] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 463.586589][T19802] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.607982][T19802] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 463.626375][T19802] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 463.707203][T19802] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.727763][T19802] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 463.738376][T19802] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 463.764700][T19827] netlink: 'syz.5.3985': attribute type 21 has an invalid length. [ 463.775226][T19827] netlink: 'syz.5.3985': attribute type 21 has an invalid length. [ 463.849578][ T9632] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.866409][ T9632] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 463.879117][ T9632] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 463.952109][ T9610] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.979997][ T9610] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 464.025351][ T9610] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 464.065133][ T9610] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.092677][ T9610] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 464.111419][ T9610] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 464.141051][ T9610] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.149465][ T9610] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 464.158308][ T9610] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 464.167667][T19851] tipc: Enabled bearer , priority 0 [ 464.176146][T19851] syzkaller0: entered promiscuous mode [ 464.182005][T19851] syzkaller0: entered allmulticast mode [ 464.190190][T19842] tipc: Enabling of bearer rejected, already enabled [ 464.215432][T19842] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 464.219782][T19854] GUP no longer grows the stack in syz.4.3991 (19854): 200000003000-20000000a000 (200000001000) [ 464.230090][T19842] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 464.242396][T19842] tipc: Resetting bearer [ 464.252261][T19851] tipc: Resetting bearer [ 464.258707][T19854] CPU: 0 UID: 0 PID: 19854 Comm: syz.4.3991 Not tainted syzkaller #0 PREEMPT(full) [ 464.258733][T19854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.258745][T19854] Call Trace: [ 464.258753][T19854] [ 464.258761][T19854] dump_stack_lvl+0x189/0x250 [ 464.258795][T19854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.258821][T19854] ? __pfx__printk+0x10/0x10 [ 464.258837][T19854] ? find_vma+0xe7/0x160 [ 464.258876][T19854] __get_user_pages+0x2470/0x2a00 [ 464.258907][T19854] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 464.258954][T19854] ? rcu_is_watching+0x15/0xb0 [ 464.258981][T19854] __gup_longterm_locked+0xde4/0x1660 [ 464.259011][T19854] ? try_grab_folio_fast+0x1bf/0x6a0 [ 464.259046][T19854] ? gup_fast_fallback+0x1b86/0x22d0 [ 464.259073][T19854] gup_fast_fallback+0x1d65/0x22d0 [ 464.259141][T19854] ? __pfx_gup_fast_fallback+0x10/0x10 [ 464.259162][T19854] ? __mutex_lock+0x335/0x1350 [ 464.259197][T19854] ? is_valid_gup_args+0x11f/0x200 [ 464.259222][T19854] ? get_user_pages_fast+0x4d/0xb0 [ 464.259247][T19854] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 464.259278][T19854] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 464.259296][T19854] ? wait_for_space+0x248/0x2d0 [ 464.259316][T19854] iov_iter_get_pages2+0x5e/0xa0 [ 464.259342][T19854] __se_sys_vmsplice+0x548/0x10d0 [ 464.259372][T19854] ? futex_private_hash_put+0x4b/0x280 [ 464.259403][T19854] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 464.259426][T19854] ? __pfx_futex_wake+0x10/0x10 [ 464.259517][T19854] ? do_syscall_64+0xbe/0xfa0 [ 464.259547][T19854] do_syscall_64+0xfa/0xfa0 [ 464.259570][T19854] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.259593][T19854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.259612][T19854] ? clear_bhb_loop+0x60/0xb0 [ 464.259634][T19854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.259652][T19854] RIP: 0033:0x7f54b798f6c9 [ 464.259669][T19854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.259684][T19854] RSP: 002b:00007f54b8777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 464.259706][T19854] RAX: ffffffffffffffda RBX: 00007f54b7be5fa0 RCX: 00007f54b798f6c9 [ 464.259721][T19854] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 464.259733][T19854] RBP: 00007f54b7a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 464.259745][T19854] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 464.259757][T19854] R13: 00007f54b7be6038 R14: 00007f54b7be5fa0 R15: 00007ffc4c648698 [ 464.259791][T19854] [ 464.515632][T19850] tipc: Resetting bearer [ 464.541582][T19850] tipc: Disabling bearer [ 464.637272][T19862] netlink: 'syz.4.3994': attribute type 1 has an invalid length. [ 464.687340][T19862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.775589][T19869] bond2: (slave veth3): Enslaving as an active interface with a down link [ 464.852769][T19862] veth5: entered promiscuous mode [ 464.874913][T19862] bond2: (slave veth5): Enslaving as an active interface with a down link [ 464.920518][T19869] vlan2: entered allmulticast mode [ 464.926569][T19869] bond2: entered allmulticast mode [ 464.935694][T19869] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 465.060505][T19886] bond4: (slave gretap0): Device is not bonding slave [ 465.068596][T19886] bond4: option active_slave: invalid value (gretap0) [ 465.088745][T19886] bond4 (unregistering): Released all slaves [ 465.129644][T19881] netlink: 'syz.5.3999': attribute type 8 has an invalid length. [ 465.138888][T19880] netlink: 'syz.5.3999': attribute type 8 has an invalid length. [ 465.421821][T19914] netlink: 'syz.1.4010': attribute type 10 has an invalid length. [ 465.440769][T19915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.471140][T19914] geneve1: entered promiscuous mode [ 465.481949][T19914] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 465.507897][T19915] netlink: 'syz.5.4009': attribute type 1 has an invalid length. [ 465.526316][T19915] syzkaller1: entered promiscuous mode [ 465.538363][T19915] syzkaller1: entered allmulticast mode [ 465.557621][T19915] block nbd3: Unsupported socket: should be TCP or UNIX. [ 465.912392][T19944] netlink: 'syz.5.4019': attribute type 11 has an invalid length. [ 466.013088][T19958] 0{X: renamed from gretap0 (while UP) [ 466.042251][T19958] 0{X: entered allmulticast mode [ 466.058092][T19958] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 466.104735][T19964] netlink: 'syz.1.4026': attribute type 13 has an invalid length. [ 466.113317][T19965] netlink: 'syz.1.4026': attribute type 13 has an invalid length. [ 466.217210][T19971] netlink: 'syz.1.4029': attribute type 15 has an invalid length. [ 466.225814][T19971] __nla_validate_parse: 21 callbacks suppressed [ 466.225828][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'. [ 466.250985][ T9610] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 466.251116][T19971] netlink: 'syz.1.4029': attribute type 15 has an invalid length. [ 466.263317][ T9610] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 466.307710][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'. [ 466.311123][ T9610] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 466.343059][ T9610] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 466.685466][T19996] block nbd3: server does not support multiple connections per device. [ 466.694351][T19996] block nbd3: shutting down sockets [ 466.981196][T20018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4042'. [ 467.031351][T20018] netlink: 'syz.1.4042': attribute type 1 has an invalid length. [ 467.052391][T20018] netlink: 'syz.1.4042': attribute type 2 has an invalid length. [ 467.112379][T20025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4045'. [ 467.123133][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4045'. [ 467.183623][T20025] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.195908][T20027] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 467.203234][T20027] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 467.212301][T20027] tipc: Resetting bearer [ 467.268962][T20036] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4047'. [ 467.511008][T20052] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 467.525809][T20052] bond0 (unregistering): Released all slaves [ 467.791509][T20072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4060'. [ 467.793787][T20067] xt_CONNSECMARK: invalid mode: 0 [ 467.996294][T20088] veth0_to_bond: entered allmulticast mode [ 468.186925][T20105] sit2: entered promiscuous mode [ 468.191991][T20105] sit2: entered allmulticast mode [ 468.316223][T20116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4075'. [ 468.330722][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4075'. [ 468.341692][T20117] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4074'. [ 468.403807][T20124] 0{X: left allmulticast mode [ 468.535587][T20124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.555245][T20124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.774982][T20124] bridge1: left promiscuous mode [ 468.781358][T20124] bridge1: left allmulticast mode [ 468.817940][T20124] bridge3: left promiscuous mode [ 468.835073][T20124] bridge3: left allmulticast mode [ 468.883235][T20124] geneve2: left promiscuous mode [ 468.889817][T20124] geneve2: left allmulticast mode [ 468.902121][T20124] bond2: left promiscuous mode [ 468.908688][T20124] bridge4: left promiscuous mode [ 468.928384][T20124] ip6erspan0: left promiscuous mode [ 468.933815][T20124] ip6erspan0: left allmulticast mode [ 468.956496][T20124] geneve3: left promiscuous mode [ 468.961651][T20124] geneve3: left allmulticast mode [ 468.977669][T20124] gretap0: left promiscuous mode [ 468.983846][T20124] gretap0: left allmulticast mode [ 468.992369][T20124] veth0_macvtap: left allmulticast mode [ 468.998361][T20124] macvtap3: left allmulticast mode [ 469.088977][T20124] bond9: left promiscuous mode [ 469.093858][T20124] bond9: left allmulticast mode [ 469.100733][T20124] tipc: Resetting bearer [ 469.138922][T20124] bond11: left allmulticast mode [ 469.160808][T20124] veth5: left promiscuous mode [ 469.167873][T20124] veth7: left promiscuous mode [ 469.176395][T20124] gretap1: left promiscuous mode [ 469.181358][T20124] gretap1: left allmulticast mode [ 469.200895][T20124] vlan0: left promiscuous mode [ 469.206510][T20124] geneve1: left promiscuous mode [ 469.211761][T20124] vlan0: left allmulticast mode [ 469.221244][T20124] geneve1: left allmulticast mode [ 469.230943][T20124] gretap2: left promiscuous mode [ 469.236399][T20124] gretap2: left allmulticast mode [ 469.253593][T20124] gtp0: left promiscuous mode [ 469.258996][T20124] gtp0: left allmulticast mode [ 469.381806][T20152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.687378][ T9610] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 469.697684][ T9610] netdevsim netdevsim5 eth0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 469.707283][ T9610] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.729018][T10417] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 469.746678][T10417] netdevsim netdevsim5 eth1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 469.772072][T10417] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.781736][T10417] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 469.791272][T10417] netdevsim netdevsim5 eth2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 469.800702][T10417] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.818886][T10417] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 469.842996][T10417] netdevsim netdevsim5 eth3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 469.859156][T10417] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.882665][T20170] vlan3: entered promiscuous mode [ 469.900923][T20170] gretap0: entered promiscuous mode [ 469.932277][T20174] tipc: Started in network mode [ 469.938704][T20174] tipc: Node identity ac14140f, cluster identity 4711 [ 469.948394][T20174] tipc: New replicast peer: 255.255.255.255 [ 469.956502][T20174] tipc: Enabled bearer , priority 10 [ 470.082557][T20185] tipc: Started in network mode [ 470.087644][T20185] tipc: Node identity 8ed68a0e64d9, cluster identity 4711 [ 470.095505][T20185] tipc: Enabled bearer , priority 0 [ 470.103221][T20185] syzkaller0: entered promiscuous mode [ 470.112708][T20185] syzkaller0: entered allmulticast mode [ 470.155176][T20182] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 470.202623][T20192] tipc: Resetting bearer [ 470.234396][T20180] tipc: Resetting bearer [ 470.276705][T20180] tipc: Disabling bearer [ 470.303775][T20191] vlan3: entered promiscuous mode [ 470.310398][T20191] bridge0: entered promiscuous mode [ 470.542136][T20212] xt_hashlimit: overflow, try lower: 3/0 [ 470.557387][T20215] bridge_slave_0: left allmulticast mode [ 470.563056][T20215] bridge_slave_0: left promiscuous mode [ 470.569413][T20215] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.612753][T20215] bridge_slave_1: left allmulticast mode [ 470.632758][T20215] bridge_slave_1: left promiscuous mode [ 470.653043][T20215] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.693191][T20215] bond0: (slave bond_slave_0): Releasing backup interface [ 470.710003][T20215] bond0: (slave bond_slave_1): Releasing backup interface [ 470.727421][T20215] team0: Port device team_slave_0 removed [ 470.738993][T20215] team0: Port device team_slave_1 removed [ 470.750503][T20215] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 470.771502][T20232] netlink: 'syz.6.4107': attribute type 3 has an invalid length. [ 471.074857][ T7376] tipc: Node number set to 2886997007 [ 471.103459][T20256] netlink: 'syz.1.4114': attribute type 1 has an invalid length. [ 471.158566][T20256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 471.183220][T20259] 0{X: renamed from gretap0 [ 471.191482][T20259] 0{X: entered allmulticast mode [ 471.200289][T20259] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 471.271701][T20262] 0: reclassify loop, rule prio 0, protocol 800 [ 471.476623][T20275] __nla_validate_parse: 112 callbacks suppressed [ 471.476640][T20275] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4120'. [ 471.528570][T20280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4121'. [ 471.596105][T20280] vlan2: entered allmulticast mode [ 471.614669][T20280] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 471.643328][T20278] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4122'. [ 471.661423][T20292] openvswitch: netlink: Message has 4 unknown bytes. [ 471.681046][T20278] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4122'. [ 471.843402][T20306] netlink: 'syz.2.4127': attribute type 13 has an invalid length. [ 471.872376][T20306] 0{X: refused to change device tx_queue_len [ 471.895177][T20306] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 472.326340][T20335] veth1_macvtap: left promiscuous mode [ 472.347452][T20335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 472.551000][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4140'. [ 472.637156][T20353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4143'. [ 472.647009][T20353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4143'. [ 472.694318][T20354] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 472.721805][T20354] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 472.930993][T20372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.962318][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4152'. [ 472.977610][T20377] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4148'. [ 473.099020][T20386] netlink: 'syz.5.4151': attribute type 11 has an invalid length. [ 474.096594][T20459] netlink: 'syz.6.4177': attribute type 1 has an invalid length. [ 474.130087][T20459] bond0: (slave geneve3): making interface the new active one [ 474.138207][T20459] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 474.147324][T10417] netdevsim netdevsim6 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 474.151585][T20459] netlink: 'syz.6.4177': attribute type 1 has an invalid length. [ 474.158119][T10417] netdevsim netdevsim6 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 474.185848][T10417] netdevsim netdevsim6 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 474.197263][T10417] netdevsim netdevsim6 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 474.272236][T20470] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 474.281067][T20470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.146765][ T9078] Bluetooth: hci4: command 0x0405 tx timeout [ 475.197758][T20533] netlink: 'syz.4.4196': attribute type 1 has an invalid length. [ 475.241148][T20533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.416877][T20556] netlink: 'syz.4.4204': attribute type 1 has an invalid length. [ 475.551456][T20556] bond3: (slave gretap0): making interface the new active one [ 475.583291][T20556] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 476.451116][T20625] netlink: 'syz.2.4222': attribute type 4 has an invalid length. [ 476.482594][T20625] netlink: 'syz.2.4222': attribute type 4 has an invalid length. [ 476.807961][T20642] __nla_validate_parse: 15 callbacks suppressed [ 476.807979][T20642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4225'. [ 476.889781][T20642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4225'. [ 476.919699][T20645] pim6reg1: entered promiscuous mode [ 476.944035][T20645] pim6reg1: entered allmulticast mode [ 476.999649][T20647] netlink: 'syz.1.4228': attribute type 9 has an invalid length. [ 477.006218][T20652] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4229'. [ 477.023598][T20652] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4229'. [ 477.036358][ T9078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.047727][T20650] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4229'. [ 477.047823][ T9078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.071571][ T9078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.086664][ T9078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.096146][ T9078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.197652][T20658] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4230'. [ 477.207834][T20658] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4230'. [ 477.218657][T20658] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4230'. [ 477.259488][T20653] wg1 speed is unknown, defaulting to 1000 [ 477.481420][T20679] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4235'. [ 477.582877][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4237'. [ 477.666205][ T9625] team0: left allmulticast mode [ 477.671130][ T9625] team_slave_0: left allmulticast mode [ 477.682275][ T9625] geneve0: left allmulticast mode [ 477.697953][ T9625] team0: left promiscuous mode [ 477.703032][ T9625] team_slave_0: left promiscuous mode [ 477.730502][ T9625] geneve0: left promiscuous mode [ 477.754873][ T9625] bridge0: port 2(team0) entered disabled state [ 477.792930][T20687] netlink: 'syz.2.4240': attribute type 1 has an invalid length. [ 477.863687][ T9625] bridge_slave_0: left allmulticast mode [ 477.882405][ T9625] bridge_slave_0: left promiscuous mode [ 477.904269][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.217050][ T9625] bond13 (unregistering): (slave gretap3): Releasing active interface [ 478.352468][ T9625] team0: Port device geneve0 removed [ 478.535306][ T9625] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 478.953626][ T9625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.963486][ T9625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.973381][ T9625] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 478.983560][ T9625] bond0 (unregistering): Released all slaves [ 479.078136][ T9625] bond1 (unregistering): Released all slaves [ 479.147387][ T5824] Bluetooth: hci1: command tx timeout [ 479.173744][ T9625] bond2 (unregistering): Released all slaves [ 479.186715][ T9625] bond3 (unregistering): Released all slaves [ 479.199988][ T9625] bond4 (unregistering): Released all slaves [ 479.293533][ T9625] bond5 (unregistering): Released all slaves [ 479.382447][ T9625] bond6 (unregistering): Released all slaves [ 479.395660][ T9625] bond7 (unregistering): Released all slaves [ 479.408752][ T9625] bond8 (unregistering): Released all slaves [ 479.499745][ T9625] bond9 (unregistering): Released all slaves [ 479.589016][ T9625] bond10 (unregistering): Released all slaves [ 479.678838][ T9625] bond11 (unregistering): (slave veth5): Releasing active interface [ 479.688066][ T9625] bond11 (unregistering): (slave veth7): Releasing active interface [ 479.697204][ T9625] bond11 (unregistering): Released all slaves [ 479.791845][ T9625] bond12 (unregistering): Released all slaves [ 479.806129][ T9625] bond13 (unregistering): Released all slaves [ 479.818967][ T9625] bond14 (unregistering): Released all slaves [ 479.833425][T20687] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 479.849397][T20688] veth3: entered promiscuous mode [ 480.009041][T20704] gretap1: entered promiscuous mode [ 480.020352][T20704] gretap1: entered allmulticast mode [ 480.252072][T20714] syzkaller1: entered promiscuous mode [ 480.263726][T20714] syzkaller1: entered allmulticast mode [ 480.341255][T20729] wg1: entered promiscuous mode [ 480.349255][T20729] wg1: entered allmulticast mode [ 480.397312][T20736] netlink: 'syz.4.4252': attribute type 12 has an invalid length. [ 480.457693][T20736] bond4: option primary_reselect: invalid value (255) [ 480.467982][T20736] bond4 (unregistering): Released all slaves [ 480.552545][T20653] chnl_net:caif_netlink_parms(): no params data found [ 480.785891][T20748] bridge0: entered promiscuous mode [ 480.791455][T20748] team0: entered promiscuous mode [ 480.799035][T20748] macsec2: entered promiscuous mode [ 480.806034][T20748] macsec2: entered allmulticast mode [ 480.811364][T20748] bridge0: entered allmulticast mode [ 480.819060][T20748] bridge0: port 2(macsec2) entered blocking state [ 480.825636][T20748] bridge0: port 2(macsec2) entered disabled state [ 480.835618][T20748] bridge0: left allmulticast mode [ 480.840807][T20748] bridge0: left promiscuous mode [ 480.846056][T20748] team0: left promiscuous mode [ 480.878355][T20653] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.886508][T20653] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.893682][T20653] bridge_slave_0: entered allmulticast mode [ 480.902788][T20653] bridge_slave_0: entered promiscuous mode [ 480.940892][T20653] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.958143][T20653] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.976378][T20653] bridge_slave_1: entered allmulticast mode [ 480.986599][T20653] bridge_slave_1: entered promiscuous mode [ 481.016985][T20771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.024291][T20771] IPv6: NLM_F_CREATE should be set when creating new route [ 481.063107][T20653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.117805][T20653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.212466][T20653] team0: Port device team_slave_0 added [ 481.224999][ T5824] Bluetooth: hci1: command tx timeout [ 481.228776][T20653] team0: Port device team_slave_1 added [ 481.340067][T20653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.353971][T20653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.382118][T20653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.396405][T20653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.403744][T20653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.431424][T20653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.553625][ T9625] tipc: Disabling bearer [ 481.560697][ T9625] tipc: Disabling bearer [ 481.611219][ T9625] tipc: Left network mode [ 481.726946][T20809] netlink: 'syz.1.4270': attribute type 3 has an invalid length. [ 481.785978][T20810] netlink: 'syz.4.4274': attribute type 12 has an invalid length. [ 481.923510][T20822] __nla_validate_parse: 9 callbacks suppressed [ 481.923527][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4277'. [ 481.951044][T20653] hsr_slave_0: entered promiscuous mode [ 481.958744][T20653] hsr_slave_1: entered promiscuous mode [ 481.965534][T20653] debugfs: 'hsr0' already exists in 'hsr' [ 481.971257][T20653] Cannot create hsr debugfs directory [ 482.001988][T20820] netem: incorrect gi model size [ 482.007877][T20820] netem: change failed [ 482.021277][T20823] syzkaller0: entered promiscuous mode [ 482.044572][T20823] syzkaller0: entered allmulticast mode [ 482.109571][T20826] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4278'. [ 482.616287][T20858] netlink: 'syz.1.4287': attribute type 11 has an invalid length. [ 482.625590][T20858] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4287'. [ 482.912791][ T9625] batadv0: left promiscuous mode [ 482.954865][ T9625] dummy0: left promiscuous mode [ 483.020250][ T9625] hsr_slave_0: left promiscuous mode [ 483.036059][ T9625] hsr_slave_1: left promiscuous mode [ 483.050665][ T9625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.060657][ T9625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.253618][ T9625] veth1_macvtap (unregistering): left allmulticast mode [ 483.307221][ T5824] Bluetooth: hci1: command tx timeout [ 483.356915][T20901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4297'. [ 483.367229][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4297'. [ 483.413625][T20905] netlink: 'syz.2.4297': attribute type 1 has an invalid length. [ 483.472857][ T9625] team0 (unregistering): Port device team_slave_0 removed [ 484.016624][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4301'. [ 484.102388][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4302'. [ 484.170034][ T9625] IPVS: stop unused estimator thread 0... [ 484.222168][T20931] syz_tun: entered allmulticast mode [ 484.251103][T20930] syz_tun: left allmulticast mode [ 484.305230][T20934] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 484.359392][T20937] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 484.682255][T20928] netlink: 'syz.4.4303': attribute type 2 has an invalid length. [ 484.698256][T20928] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4303'. [ 484.716298][T20653] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 484.735495][T20653] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 484.758866][T20653] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 484.779902][T20653] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 485.016914][T20653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.070110][T20653] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.088439][ T9611] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.095625][ T9611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.139327][T20965] dvmrp0: entered allmulticast mode [ 485.177100][T20966] batadv_slave_1: entered promiscuous mode [ 485.189040][ T9611] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.196252][ T9611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.221358][T20960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4310'. [ 485.231304][T20966] batadv_slave_1: left promiscuous mode [ 485.305314][T20976] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4313'. [ 485.386197][ T5824] Bluetooth: hci1: command tx timeout [ 485.422709][T20982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.432662][T20982] batadv_slave_0: entered promiscuous mode [ 485.439124][T20982] batadv_slave_0: entered allmulticast mode [ 485.765949][T20653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.042566][T20972] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 486.054929][T20972] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 486.190786][T20972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 486.205814][T20972] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 486.300411][T20972] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 486.328417][T20972] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 486.347337][T20653] veth0_vlan: entered promiscuous mode [ 486.363059][T20653] veth1_vlan: entered promiscuous mode [ 486.467128][T20972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 486.482935][T20972] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 486.507577][T20653] veth0_macvtap: entered promiscuous mode [ 486.533683][T20653] veth1_macvtap: entered promiscuous mode [ 486.568966][T21042] netlink: 'syz.4.4329': attribute type 29 has an invalid length. [ 486.578167][T21042] netlink: 'syz.4.4329': attribute type 29 has an invalid length. [ 486.600689][T20653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.626110][T20653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.653653][T10417] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.671773][T10417] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.693450][T10417] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.711317][T10417] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.781252][T21048] xt_l2tp: v2 doesn't support IP mode [ 486.842053][ T9625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.871478][ T9625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.915564][ T9625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.924468][ T9625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.965169][T21057] __nla_validate_parse: 2 callbacks suppressed [ 486.965183][T21057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4335'. [ 487.013616][T21057] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4335'. [ 487.040787][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4336'. [ 487.078054][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4336'. [ 487.205931][T21070] netlink: 'syz.5.4337': attribute type 1 has an invalid length. [ 487.286641][T21078] netlink: 'syz.4.4339': attribute type 10 has an invalid length. [ 487.569157][T21083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 487.607841][T21083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.736390][T21083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 487.760748][T21083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.819172][T21104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.876322][T21102] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 487.960359][T21113] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4344'. [ 487.962375][T21083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 488.026051][T21083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.258587][T21083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 488.294899][T21083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.540430][ T9078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.552757][ T9078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.589261][ T9078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.615164][ T9078] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.632220][ T9078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.667874][ T9608] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 488.711960][ T9608] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.776450][T10417] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 488.799129][T10417] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.820207][T10417] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 488.842164][T10417] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.863751][T21157] netlink: 81 bytes leftover after parsing attributes in process `syz.2.4358'. [ 488.867015][T21161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4360'. [ 488.880435][T21140] wg1 speed is unknown, defaulting to 1000 [ 488.901634][ T9611] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.913128][ T9611] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 488.928159][ T9611] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 488.938559][ T9611] netdevsim netdevsim6 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 488.962547][ T9608] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 488.971532][ T9608] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.006850][ T9611] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.022200][ T9611] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 489.045830][ T9611] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 489.057613][ T9611] netdevsim netdevsim6 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 489.186412][ T9611] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.204565][ T9611] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 489.242254][ T9611] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 489.248595][T21176] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4363'. [ 489.262472][ T9611] netdevsim netdevsim6 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 489.302379][T21176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4363'. [ 489.326384][T21180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4366'. [ 489.348995][T21176] bridge0: entered promiscuous mode [ 489.365565][T21176] macsec1: entered promiscuous mode [ 489.370925][T21176] macsec1: entered allmulticast mode [ 489.398758][T21176] bridge0: entered allmulticast mode [ 489.407387][T21176] bridge0: port 3(macsec1) entered blocking state [ 489.414333][T21176] bridge0: port 3(macsec1) entered disabled state [ 489.451394][T21176] bridge0: left allmulticast mode [ 489.459096][T21176] bridge0: left promiscuous mode [ 489.535091][ T9611] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.546648][ T9611] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 489.560918][ T9611] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 489.575028][ T9611] netdevsim netdevsim6 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 489.867984][T21212] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 489.972218][ T9611] team0: left allmulticast mode [ 489.984846][ T9611] team_slave_0: left allmulticast mode [ 489.990766][ T9611] team_slave_1: left allmulticast mode [ 490.004871][ T9611] team_slave_0: left promiscuous mode [ 490.010583][ T9611] team_slave_1: left promiscuous mode [ 490.025554][ T9611] bridge0: port 1(team0) entered disabled state [ 490.754488][ T5824] Bluetooth: hci0: command tx timeout [ 490.799337][ T9611] bond0 (unregistering): (slave geneve3): Releasing active interface [ 491.125287][ T9611] bond5 (unregistering): (slave bridge7): Releasing active interface [ 491.324890][ T9611] bond8 (unregistering): (slave bridge10): Releasing backup interface [ 491.333072][ T9611] bridge10 (unregistering): left promiscuous mode [ 491.444739][ T9611] team0: Port device bridge13 removed [ 491.517633][ T9611] bond1 (unregistering): Released all slaves [ 491.610309][ T9611] bond2 (unregistering): Released all slaves [ 491.622921][ T9611] bond3 (unregistering): Released all slaves [ 491.636848][ T9611] bond4 (unregistering): Released all slaves [ 491.650746][ T9611] bond5 (unregistering): Released all slaves [ 491.666085][ T9611] bond6 (unregistering): Released all slaves [ 491.679585][ T9611] bond7 (unregistering): Released all slaves [ 491.775637][ T9611] bond8 (unregistering): Released all slaves [ 491.865578][ T9611] bond9 (unregistering): Released all slaves [ 491.878685][ T9611] bond0 (unregistering): Released all slaves [ 491.908393][T21140] chnl_net:caif_netlink_parms(): no params data found [ 492.264558][ T9611] : left promiscuous mode [ 492.381730][ T9611] tipc: Disabling bearer [ 492.418594][ T9611] tipc: Left network mode [ 492.555607][T21140] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.562763][T21140] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.588154][T21140] bridge_slave_0: entered allmulticast mode [ 492.596548][T21140] bridge_slave_0: entered promiscuous mode [ 492.649488][T21140] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.665547][T21140] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.678382][T21140] bridge_slave_1: entered allmulticast mode [ 492.699851][T21140] bridge_slave_1: entered promiscuous mode [ 492.826622][ T5824] Bluetooth: hci0: command tx timeout [ 492.838201][T21140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.876393][T21140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.039781][T21318] __nla_validate_parse: 1 callbacks suppressed [ 493.039798][T21318] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4399'. [ 493.061688][T21140] team0: Port device team_slave_0 added [ 493.093058][T21323] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4399'. [ 493.094424][T21324] netlink: 'syz.4.4396': attribute type 16 has an invalid length. [ 493.134155][T21324] netlink: 'syz.4.4396': attribute type 17 has an invalid length. [ 493.161422][T21140] team0: Port device team_slave_1 added [ 493.184053][T21326] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 493.197583][T21324] 0{X: left allmulticast mode [ 493.215192][T21324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.268497][T21140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.275684][T21140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.302595][T21140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.373031][T21336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4403'. [ 493.386937][T21140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.400527][T21140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.430193][T21140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.635904][T21339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.692427][T21140] hsr_slave_0: entered promiscuous mode [ 493.710379][T21140] hsr_slave_1: entered promiscuous mode [ 493.729894][T21140] debugfs: 'hsr0' already exists in 'hsr' [ 493.747405][T21140] Cannot create hsr debugfs directory [ 493.770189][ T9611] hsr_slave_0: left promiscuous mode [ 493.779603][ T9611] hsr_slave_1: left promiscuous mode [ 493.787516][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.795244][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.824590][ T9611] vlan0: left allmulticast mode [ 493.829606][ T9611] veth0_vlan: left allmulticast mode [ 493.836065][ T9611] vlan0: left promiscuous mode [ 493.841437][ T9611] veth1_macvtap: left promiscuous mode [ 493.847530][ T9611] veth1_vlan: left promiscuous mode [ 493.852979][ T9611] veth0_vlan: left promiscuous mode [ 494.161537][T21363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4410'. [ 494.600532][ T9611] team0 (unregistering): Port device team_slave_1 removed [ 494.635065][ T9611] team0 (unregistering): Port device team_slave_0 removed [ 494.911400][T21364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4409'. [ 494.921815][ T5824] Bluetooth: hci0: command tx timeout [ 495.239117][T21380] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4416'. [ 495.271879][T21380] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4416'. [ 495.297128][T21380] netlink: 'syz.5.4416': attribute type 7 has an invalid length. [ 495.307331][T21380] netlink: 'syz.5.4416': attribute type 8 has an invalid length. [ 495.330437][T21380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4416'. [ 495.357566][T21382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.520221][ T9611] IPVS: stop unused estimator thread 0... [ 495.599529][T21396] macvtap1: entered promiscuous mode [ 495.634115][T21396] vlan0: entered promiscuous mode [ 495.639519][T21396] macvtap1: entered allmulticast mode [ 495.656639][T21396] vlan0: entered allmulticast mode [ 495.661771][T21396] veth0_vlan: entered allmulticast mode [ 495.765288][T21406] macvtap2: entered promiscuous mode [ 495.788117][T21406] macvtap2: entered allmulticast mode [ 495.852470][T21405] macvtap2: entered promiscuous mode [ 495.867523][T21405] macvtap2: entered allmulticast mode [ 495.899864][T21424] netlink: 'syz.2.4429': attribute type 29 has an invalid length. [ 495.923126][T21424] netlink: 'syz.2.4429': attribute type 29 has an invalid length. [ 495.933556][T21424] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4429'. [ 496.085268][T21427] tipc: Enabled bearer , priority 0 [ 496.146443][T21427] syzkaller0: entered promiscuous mode [ 496.152568][T21427] syzkaller0: entered allmulticast mode [ 496.994409][ T5824] Bluetooth: hci0: command tx timeout [ 497.224044][T20145] tipc: Node number set to 3926886926 [ 497.518678][T21446] tipc: Resetting bearer [ 497.613782][T21426] tipc: Resetting bearer [ 497.648995][T21426] tipc: Disabling bearer [ 497.670157][T21453] mac80211_hwsim hwsim35 : renamed from wlan1 [ 497.702736][T21456] syzkaller0: entered promiscuous mode [ 497.725061][T21456] syzkaller0: entered allmulticast mode [ 497.778849][T21140] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.809682][T21466] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 497.834902][T21140] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 497.858525][T21140] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 497.920632][T21140] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 497.989959][T21484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4445'. [ 498.054715][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4445'. [ 498.139701][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4447'. [ 498.220683][T21140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.245770][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4449'. [ 498.255270][T21140] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.266325][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.273450][ T9632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.284776][T21498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4449'. [ 498.300859][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.308063][ T9632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.330463][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4449'. [ 498.340745][ T9610] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 498.354984][ T9610] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 498.365292][T21498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4449'. [ 498.376971][T21503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4451'. [ 498.387834][ T9610] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 498.407150][ T9610] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 498.592220][T21514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4454'. [ 498.612698][T21511] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.4453'. [ 498.623487][T21514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4454'. [ 498.645172][T21516] netlink: 'syz.5.4455': attribute type 1 has an invalid length. [ 498.698746][T21521] IPv6: NLM_F_REPLACE set, but no existing node found! [ 498.899522][T21140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.959812][T21535] netlink: 'syz.1.4458': attribute type 13 has an invalid length. [ 500.871845][T21140] veth0_vlan: entered promiscuous mode [ 500.900775][T21140] veth1_vlan: entered promiscuous mode [ 500.967272][T21583] netlink: 'syz.4.4469': attribute type 33 has an invalid length. [ 500.996822][T21140] veth0_macvtap: entered promiscuous mode [ 501.034894][T21140] veth1_macvtap: entered promiscuous mode [ 501.085045][T21140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.111064][T21140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.149032][ T9632] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.178108][ T9632] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.190670][ T9632] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.205013][ T9632] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.232644][T21595] IPv6: addrconf: prefix option has invalid lifetime [ 501.321403][ T7368] IPVS: starting estimator thread 0... [ 501.333134][ T9607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.361126][ T9607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.420539][ T9611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.446621][ T9611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.448743][T21604] IPVS: using max 31 ests per chain, 74400 per kthread [ 501.608070][T21624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.903237][T21643] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 501.910325][T21641] wg1 speed is unknown, defaulting to 1000 [ 502.178784][ T30] audit: type=1800 audit(1762235411.263:5): pid=21646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4485" name="memory.events" dev="tmpfs" ino=1694 res=0 errno=0 [ 502.677128][T21676] netlink: 'syz.1.4495': attribute type 21 has an invalid length. [ 502.761286][T21679] team0: Caught tx_queue_len zero misconfig [ 502.887975][T21687] 8021q: VLANs not supported on vxcan1 [ 503.171155][T21700] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 503.196582][T21700] bond4 (unregistering): Released all slaves [ 503.488743][T21720] __nla_validate_parse: 15 callbacks suppressed [ 503.488760][T21720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4510'. [ 503.611432][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4511'. [ 503.673157][T21727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 503.711401][T21730] bond4: entered allmulticast mode [ 503.888254][T21739] tipc: Trying to set illegal importance in message [ 504.079748][T21752] netlink: 'syz.2.4520': attribute type 4 has an invalid length. [ 504.130767][T21759] netlink: 'syz.2.4520': attribute type 4 has an invalid length. [ 504.180960][T21758] lo: Caught tx_queue_len zero misconfig [ 504.237058][T21752] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 504.239094][T21761] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4522'. [ 504.259264][T21752] syzkaller0: entered promiscuous mode [ 504.266761][T21752] syzkaller0: entered allmulticast mode [ 504.502975][T21782] bridge0: mtu less than device minimum [ 504.679887][T21786] syzkaller1: entered promiscuous mode [ 504.691081][T21786] syzkaller1: entered allmulticast mode [ 504.718195][T21792] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 504.961817][T21806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4535'. [ 505.004640][T21806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4535'. [ 505.033802][T21810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4535'. [ 505.102912][T21812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4536'. [ 505.163396][T21811] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 505.211817][T21811] bond1 (unregistering): Released all slaves [ 505.272941][T21810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4535'. [ 505.420974][T21825] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4542'. [ 505.491790][T21825] netlink: 'syz.6.4542': attribute type 2 has an invalid length. [ 505.565875][T21838] netlink: 'syz.1.4545': attribute type 1 has an invalid length. [ 505.578326][T21835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4544'. [ 505.614173][T21838] bond7: (slave geneve2): making interface the new active one [ 505.622233][T21838] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 505.632715][ T9611] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 505.644776][ T9611] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 505.653521][ T9611] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 505.655582][T21842] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 505.663330][ T9611] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 505.947274][T21861] netlink: 'syz.4.4552': attribute type 2 has an invalid length. [ 506.038275][T21871] netlink: 'syz.4.4552': attribute type 1 has an invalid length. [ 506.337569][T21889] team0: Port device team_slave_1 removed [ 506.561030][T21907] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 506.594916][T21909] netlink: 'syz.5.4569': attribute type 2 has an invalid length. [ 506.848963][T21919] tipc: Enabling of bearer rejected, failed to enable media [ 506.967598][T21935] netlink: 'syz.2.4578': attribute type 1 has an invalid length. [ 507.011117][T21934] netlink: 'syz.2.4578': attribute type 1 has an invalid length. [ 507.558630][T21973] syzkaller0: entered promiscuous mode [ 507.565051][T21973] syzkaller0: entered allmulticast mode [ 507.619037][T21977] x_tables: duplicate underflow at hook 1 [ 507.699653][T21980] bridge0: port 3(vlan2) entered blocking state [ 507.707142][T21981] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 507.720353][T21980] bridge0: port 3(vlan2) entered disabled state [ 507.727969][T21980] vlan2: entered allmulticast mode [ 507.733225][T21980] bridge0: entered allmulticast mode [ 507.744972][T21980] vlan2: left allmulticast mode [ 507.753391][T21980] bridge0: left allmulticast mode [ 508.016761][T22004] netlink: 'syz.2.4600': attribute type 2 has an invalid length. [ 508.201984][T22016] netlink: 'syz.2.4604': attribute type 11 has an invalid length. [ 508.271177][T22020] dummy0: Caught tx_queue_len zero misconfig [ 508.524106][T22027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.098642][T22073] Bluetooth: MGMT ver 1.23 [ 509.134293][T22077] tc_dump_action: action bad kind [ 509.203297][T22085] __nla_validate_parse: 18 callbacks suppressed [ 509.203313][T22085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4629'. [ 509.236160][T22085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 509.243406][T22085] IPv6: NLM_F_CREATE should be set when creating new route [ 509.250712][T22085] IPv6: NLM_F_CREATE should be set when creating new route [ 509.258055][T22085] IPv6: NLM_F_CREATE should be set when creating new route [ 509.270215][T22090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 509.278454][T22091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 509.381327][T22095] dvmrp0: entered allmulticast mode [ 509.446871][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'. [ 509.475587][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'. [ 509.491158][T22105] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4634'. [ 509.510350][T22108] netlink: zone id is out of range [ 509.518679][T22109] netlink: zone id is out of range [ 509.523925][T22108] netlink: zone id is out of range [ 509.541281][T22105] nbd: socks must be embedded in a SOCK_ITEM attr [ 509.548524][T22109] netlink: zone id is out of range [ 509.548536][T22109] netlink: zone id is out of range [ 509.548544][T22109] netlink: zone id is out of range [ 509.548553][T22109] netlink: zone id is out of range [ 509.548561][T22109] netlink: zone id is out of range [ 509.548569][T22109] netlink: zone id is out of range [ 509.548577][T22109] netlink: zone id is out of range [ 509.598648][T22112] batadv_slave_0: Caught tx_queue_len zero misconfig [ 509.752087][T22124] SET target dimension over the limit! [ 509.764419][T22126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4640'. [ 509.793175][T22126] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4640'. [ 509.889825][T22131] validate_nla: 2 callbacks suppressed [ 509.889842][T22131] netlink: 'syz.1.4642': attribute type 9 has an invalid length. [ 510.069922][T22145] netlink: 'syz.2.4647': attribute type 29 has an invalid length. [ 510.095592][T22145] netlink: 'syz.2.4647': attribute type 29 has an invalid length. [ 510.117180][T22145] netlink: 588 bytes leftover after parsing attributes in process `syz.2.4647'. [ 510.248314][T22158] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4652'. [ 510.312340][T22164] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4652'. [ 510.326214][T22159] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4652'. [ 510.461605][T22177] netlink: 'syz.2.4656': attribute type 1 has an invalid length. [ 510.493167][T22177] netlink: 'syz.2.4656': attribute type 1 has an invalid length. [ 510.511275][T22177] netlink: 'syz.2.4656': attribute type 2 has an invalid length. [ 510.632473][T22183] netlink: 'syz.5.4660': attribute type 1 has an invalid length. [ 510.703629][T22192] netlink: 'syz.2.4663': attribute type 10 has an invalid length. [ 510.728227][T22192] veth1_macvtap: left promiscuous mode [ 510.737039][T22192] team0: Device veth1_macvtap failed to register rx_handler [ 512.200333][T22286] x_tables: duplicate underflow at hook 3 [ 512.335927][T22253] batadv_slave_0: entered promiscuous mode [ 512.341971][T22253] batadv_slave_0: left promiscuous mode [ 512.371038][T22270] tipc: Enabled bearer , priority 0 [ 512.380122][T22272] syzkaller0: entered promiscuous mode [ 512.398023][T22272] syzkaller0: entered allmulticast mode [ 512.412055][T22282] tipc: Resetting bearer [ 512.441994][T22264] tipc: Resetting bearer [ 512.509860][T22264] tipc: Disabling bearer [ 512.563675][T22291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.733499][T22310] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 512.815302][T22310] bond6: (slave bridge5): making interface the new active one [ 512.826160][T22310] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 512.896029][T22323] netlink: 'syz.1.4694': attribute type 12 has an invalid length. [ 512.914936][T22318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.096212][T22340] gtp0: entered promiscuous mode [ 513.101271][T22340] gtp0: entered allmulticast mode [ 513.718582][T22390] xt_hashlimit: size too large, truncated to 1048576 [ 514.316926][T22425] __nla_validate_parse: 16 callbacks suppressed [ 514.316944][T22425] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4725'. [ 514.668197][T22446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4732'. [ 516.595135][T22485] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4739'. [ 516.616785][T22495] wg1 speed is unknown, defaulting to 1000 [ 516.714968][T22499] IPv6: sit1: Disabled Multicast RS [ 516.725707][T22499] sit1: entered allmulticast mode [ 516.754856][T22498] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4741'. [ 517.149050][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.207759][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.216578][T22534] tap0: linktype set to 65534 [ 517.286594][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.307494][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.319017][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.329904][T22534] tap0: linktype set to 65534 [ 517.335821][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.341436][T22534] tap0: linktype set to 65534 [ 517.345545][T22545] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 517.361036][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.404395][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.412527][T22534] tap0: linktype set to 65534 [ 517.437801][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.443329][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.450530][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.459699][T22534] tap0: linktype set to 65534 [ 517.465663][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.471210][T22534] tap0: linktype set to 65534 [ 517.494756][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.540227][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.558256][T22534] tap0: linktype set to 65534 [ 517.563416][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.582479][T22534] tap0: linktype set to 65534 [ 517.683746][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.689371][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.699028][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.704993][T22534] tap0: linktype set to 65534 [ 517.710174][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.718377][T22534] tap0: linktype set to 65534 [ 517.726701][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.732417][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.768610][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.776247][T22534] tap0: linktype set to 65534 [ 517.781521][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.788356][T22534] tap0: linktype set to 65534 [ 517.793420][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.799325][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.816265][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.830350][T22534] tap0: linktype set to 65534 [ 517.857523][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.863109][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.905431][T22534] tap0: linktype set to 65534 [ 517.911169][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.920155][T22534] tap0: tun_chr_ioctl cmd 1074025677 [ 517.950964][T22534] tap0: linktype set to 65534 [ 517.970935][T22533] tap0: tun_chr_ioctl cmd 1074025680 [ 517.983558][T22582] sock: sock_timestamping_bind_phc: sock not bind to device [ 518.036150][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.068031][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.087661][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.100287][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.132353][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.164764][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.177692][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.202200][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.218136][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.231712][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.244618][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.257206][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.271939][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.285347][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.289394][T22589] netlink: 'syz.6.4766': attribute type 4 has an invalid length. [ 518.297194][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.313409][T22589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4766'. [ 518.342244][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.354692][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.366524][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.379562][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.391352][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.418338][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.431502][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.432595][T22592] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4767'. [ 518.458943][T22595] xt_policy: too many policy elements [ 518.462452][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.476752][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.506264][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.519738][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.574205][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.608510][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.647501][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.690626][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.729648][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.731570][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4772'. [ 518.751430][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.766757][T22606] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 518.767488][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.795950][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.809398][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.841589][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.883796][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.897800][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.915507][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.942639][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.013489][T22621] bond7: option lp_interval: invalid value (0) [ 519.021394][T22621] bond7: option lp_interval: allowed values 1 - 2147483647 [ 519.028281][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.040615][T22621] bond7 (unregistering): Released all slaves [ 519.070283][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.086540][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.100394][T22623] syzkaller0: entered promiscuous mode [ 519.106456][T22623] syzkaller0: entered allmulticast mode [ 519.115952][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.142112][T22634] pim6reg: entered allmulticast mode [ 519.159039][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.205969][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.227906][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.274418][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.309478][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.325548][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.339270][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4780'. [ 519.349923][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.433224][T22649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4782'. [ 519.532649][T22658] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 519.766155][T22678] sctp: [Deprecated]: syz.5.4794 (pid 22678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.766155][T22678] Use struct sctp_sack_info instead [ 519.907493][T22690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4795'. [ 520.078335][T22700] syzkaller1: entered promiscuous mode [ 520.085639][T22700] syzkaller1: entered allmulticast mode [ 520.099843][T22700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4800'. [ 520.112056][T22700] netlink: 21 bytes leftover after parsing attributes in process `syz.5.4800'. [ 520.145370][T22700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4800'. [ 520.159926][T22707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4801'. [ 520.198819][T22700] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4800'. [ 520.218509][T22707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.271359][T22707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.435364][T22720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4805'. [ 520.451675][T22720] bridge_slave_0: default FDB implementation only supports local addresses [ 520.529390][T22725] net_ratelimit: 45 callbacks suppressed [ 520.529407][T22725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.583167][T22730] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4809'. [ 520.693130][T22736] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 520.730000][T22736] gretap1: entered promiscuous mode [ 520.746182][T22736] gretap1: entered allmulticast mode [ 521.002579][T22749] netlink: 'syz.4.4817': attribute type 8 has an invalid length. [ 521.050316][T22762] netlink: 'syz.6.4821': attribute type 1 has an invalid length. [ 521.346005][T22786] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 521.567077][T22804] erspan0: entered allmulticast mode [ 521.700889][T22817] x_tables: duplicate underflow at hook 2 [ 521.769896][T22821] netlink: 'syz.1.4840': attribute type 1 has an invalid length. [ 521.802356][T22821] netlink: 'syz.1.4840': attribute type 7 has an invalid length. [ 521.859515][T22821] netlink: 'syz.1.4840': attribute type 8 has an invalid length. [ 521.883138][T22821] NCSI netlink: No device for ifindex 65584 [ 521.891562][T22827] tipc: Started in network mode [ 521.923093][T22827] tipc: Node identity ba6a46f40b16, cluster identity 4711 [ 521.948538][T22827] tipc: Enabled bearer , priority 0 [ 521.989397][T22832] syzkaller0: entered promiscuous mode [ 521.995554][T22832] syzkaller0: entered allmulticast mode [ 522.008879][T22827] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 522.087932][T22842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.101969][T22827] tipc: Resetting bearer [ 522.114701][T22826] tipc: Resetting bearer [ 522.148166][T22826] tipc: Disabling bearer [ 522.255246][T22850] netlink: 'syz.2.4850': attribute type 4 has an invalid length. [ 522.622772][T22871] tipc: New replicast peer: 255.255.255.255 [ 522.655346][T22871] tipc: Enabled bearer , priority 10 [ 522.773259][T22881] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 523.482427][T22937] xt_TPROXY: Can be used only with -p tcp or -p udp [ 523.748726][T22961] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 523.775139][ T7379] tipc: Node number set to 2977711860 [ 523.786539][T22957] tipc: New replicast peer: 255.255.255.255 [ 523.807475][T22957] tipc: Enabled bearer , priority 10 [ 523.993619][T22973] tipc: Enabled bearer , priority 0 [ 524.019268][T22973] syzkaller0: entered promiscuous mode [ 524.039175][T22973] syzkaller0: entered allmulticast mode [ 524.061185][T22964] netlink: 'syz.6.4888': attribute type 1 has an invalid length. [ 524.070343][T22964] netlink: 'syz.6.4888': attribute type 1 has an invalid length. [ 524.109337][T22973] tipc: Resetting bearer [ 524.149095][T22969] tipc: Resetting bearer [ 524.210786][T22969] tipc: Disabling bearer [ 524.415253][T22988] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 524.455375][T22992] __nla_validate_parse: 24 callbacks suppressed [ 524.455393][T22992] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4899'. [ 524.485228][T22992] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4899'. [ 524.507222][T22992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4899'. [ 524.516842][T22993] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 524.740190][T23010] netlink: 'syz.6.4901': attribute type 27 has an invalid length. [ 524.754542][T23010] netlink: 'syz.6.4901': attribute type 4 has an invalid length. [ 524.765483][T23010] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4901'. [ 524.802327][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4902'. [ 524.813606][T23004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4901'. [ 524.979657][T23023] xt_bpf: check failed: parse error [ 525.083108][T23030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4908'. [ 525.156909][T23036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.206251][T23039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4912'. [ 525.216432][T23036] xt_TCPMSS: Only works on TCP SYN packets [ 525.228079][T23040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4913'. [ 525.237891][T23039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4912'. [ 525.456013][T23051] bridge0: port 3(vlan2) entered blocking state [ 525.485663][T23051] bridge0: port 3(vlan2) entered disabled state [ 525.503548][T23056] netlink: 'syz.4.4918': attribute type 4 has an invalid length. [ 525.507794][T23051] vlan2: entered allmulticast mode [ 525.534090][T23051] bridge0: entered allmulticast mode [ 525.557598][T23051] vlan2: left allmulticast mode [ 525.572811][T23051] bridge0: left allmulticast mode [ 525.713178][T23070] netlink: 'syz.4.4922': attribute type 1 has an invalid length. [ 525.728928][T23070] netlink: 'syz.4.4922': attribute type 7 has an invalid length. [ 525.743292][T23070] netlink: 'syz.4.4922': attribute type 8 has an invalid length. [ 525.752900][T23070] NCSI netlink: No device for ifindex 65584 [ 525.851749][T23081] xt_ecn: cannot match TCP bits for non-tcp packets [ 525.949073][T23089] bridge_slave_0: default FDB implementation only supports local addresses [ 526.472345][T23126] bridge4: entered promiscuous mode [ 526.488368][T23126] bridge4: entered allmulticast mode [ 526.506313][T23126] netlink: 'syz.1.4941': attribute type 9 has an invalid length. [ 526.636735][T23135] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.648844][T23135] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.656061][T23135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.952947][T23161] vlan2: entered allmulticast mode [ 526.958507][T23161] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 527.848148][T23224] syzkaller0: create flow: hash 4098159305 index 2 [ 527.866207][T10401] syzkaller0: tun_net_xmit 76 [ 527.871381][T10401] syzkaller0: tun_net_xmit 48 [ 527.896926][ T7369] syzkaller0: tun_net_xmit 76 [ 528.030881][T23235] netlink: 'syz.2.4971': attribute type 58 has an invalid length. [ 528.150432][T23210] syzkaller0: delete flow: hash 4098159305 index 2 [ 528.164434][ T7369] syzkaller0: tun_net_xmit 76 [ 528.195405][ T7369] syzkaller0: tun_net_xmit 76 [ 529.672317][T23263] __nla_validate_parse: 19 callbacks suppressed [ 529.672335][T23263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4983'. [ 529.702089][T23264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4983'. [ 529.737666][T23266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4983'. [ 529.764344][T23264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4983'. [ 529.846456][T23276] delete_channel: no stack [ 529.896257][T23267] syzkaller1: entered promiscuous mode [ 529.901760][T23267] syzkaller1: entered allmulticast mode [ 529.931197][T23281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4990'. [ 529.957889][T23287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4988'. [ 529.967010][T23287] netlink: 'syz.6.4988': attribute type 26 has an invalid length. [ 529.975284][T23287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4988'. [ 529.984681][T23288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4990'. [ 530.033064][T23287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4988'. [ 530.050682][T23281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.060825][T23287] netlink: 'syz.6.4988': attribute type 26 has an invalid length. [ 530.060846][T23287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4988'. [ 530.237287][T23298] syzkaller0: entered promiscuous mode [ 530.244780][T23298] syzkaller0: entered allmulticast mode [ 530.271830][T23298] tipc: Enabled bearer , priority 0 [ 530.282022][T23295] tipc: Resetting bearer [ 530.319323][T23295] tipc: Disabling bearer [ 530.759024][T23331] Cannot find add_set index 65532 as target [ 531.086500][T23357] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 531.107725][T23359] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 531.998056][T23419] bond7: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 532.048332][T23419] bond7: entered promiscuous mode [ 532.067055][T23419] bond7: entered allmulticast mode [ 532.085847][T23419] 8021q: adding VLAN 0 to HW filter on device bond7 [ 533.812851][T23449] bond0: Caught tx_queue_len zero misconfig [ 533.985310][T23460] netlink: 'syz.5.5045': attribute type 1 has an invalid length. [ 534.036700][T23464] tipc: Enabled bearer , priority 0 [ 534.151294][T23467] tipc: Disabling bearer [ 535.693646][T23497] gtp1: entered promiscuous mode [ 535.704367][T23497] gtp1: entered allmulticast mode [ 535.865031][T23506] tipc: Enabled bearer , priority 0 [ 535.872442][T23506] syzkaller0: entered promiscuous mode [ 535.878434][T23510] __nla_validate_parse: 7 callbacks suppressed [ 535.878448][T23510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5063'. [ 535.909294][T23506] syzkaller0: entered allmulticast mode [ 535.945273][T23506] tipc: Resetting bearer [ 535.962285][T23506] netlink: 'syz.6.5061': attribute type 12 has an invalid length. [ 535.976512][T23506] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5061'. [ 535.989501][T23505] tipc: Resetting bearer [ 536.051072][T23505] tipc: Disabling bearer [ 536.258570][T23531] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.5070'. [ 536.378885][T23539] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 536.432821][T23535] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 536.458320][T23535] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 536.742402][T23562] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 536.779782][T23562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.813812][T23571] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 536.827798][T23571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.864298][T23580] netlink: 'syz.6.5085': attribute type 10 has an invalid length. [ 536.912708][T23580] batman_adv: batadv0: Adding interface: netdevsim0 [ 536.922628][T23580] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (149) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.950104][T23580] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 537.056434][T23591] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5088'. [ 537.076050][T23591] block nbd0: Unsupported socket: should be TCP or UNIX. [ 537.259531][T23605] netlink: 'syz.1.5092': attribute type 1 has an invalid length. [ 537.276180][T23605] netlink: 'syz.1.5092': attribute type 11 has an invalid length. [ 537.285278][T23605] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5092'. [ 537.291055][T23610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5093'. [ 537.315609][T23605] tipc: Enabling of bearer rejected, failed to enable media [ 537.328236][T23605] tipc: Enabling of bearer rejected, failed to enable media [ 537.405080][T23616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5095'. [ 537.522679][T23623] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5098'. [ 537.648026][T23634] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.657137][T23634] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.710456][T23637] sctp: [Deprecated]: syz.2.5103 (pid 23637) Use of int in maxseg socket option. [ 537.710456][T23637] Use struct sctp_assoc_value instead [ 537.749156][T23640] x_tables: duplicate underflow at hook 3 [ 537.783083][T23642] sock: sock_set_timeout: `syz.2.5105' (pid 23642) tries to set negative timeout [ 537.798815][T23642] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5105'. [ 537.809198][T23643] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5105'. [ 537.881524][T23648] netlink: 'syz.2.5107': attribute type 4 has an invalid length. [ 538.255280][T23667] netlink: 'syz.5.5115': attribute type 4 has an invalid length. [ 538.490410][T23683] ipt_REJECT: TCP_RESET invalid for non-tcp [ 538.698941][T23695] xt_cgroup: xt_cgroup: no path or classid specified [ 538.788764][T23701] netlink: 'syz.4.5125': attribute type 5 has an invalid length. [ 539.016658][T23718] openvswitch: netlink: Message has 16 unknown bytes. [ 539.022294][T23721] bond0: entered allmulticast mode [ 539.102079][T23726] netlink: 'syz.1.5130': attribute type 83 has an invalid length. [ 539.290924][T23737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.100198][T23783] netlink: 'syz.2.5149': attribute type 1 has an invalid length. [ 540.196981][T23792] xfrm1: entered allmulticast mode [ 540.241599][T23783] bond8: (slave bridge8): making interface the new active one [ 540.250800][T23783] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 540.483139][T23809] x_tables: duplicate underflow at hook 2 [ 540.502783][T23810] vcan0 (unregistering): left allmulticast mode [ 540.634652][T23826] xt_TCPMSS: Only works on TCP SYN packets [ 540.925234][T23850] __nla_validate_parse: 17 callbacks suppressed [ 540.925252][T23850] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5168'. [ 540.950522][T23846] netem: change failed [ 540.957704][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5169'. [ 541.015178][T23856] xt_limit: Overflow, try lower: 271964/0 [ 541.447203][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5178'. [ 541.457316][T23890] syzkaller1: entered promiscuous mode [ 541.484218][T23890] syzkaller1: entered allmulticast mode [ 541.682624][T23906] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5185'. [ 541.740461][T23910] netlink: 'syz.4.5187': attribute type 1 has an invalid length. [ 542.076469][T23929] veth7: entered allmulticast mode [ 542.442484][T23942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5198'. [ 542.481792][T23945] openvswitch: netlink: IP tunnel dst address not specified [ 543.097680][T23988] tunl0: entered promiscuous mode [ 543.113200][T23988] netlink: 'syz.5.5214': attribute type 3 has an invalid length. [ 543.123182][T23988] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5214'. [ 543.252317][T23996] netlink: 'syz.5.5214': attribute type 32 has an invalid length. [ 543.261158][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5214'. [ 543.334526][T23996] bond3: option coupled_control: invalid value (31) [ 543.353046][T23996] bond3 (unregistering): Released all slaves [ 543.390818][T24014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5221'. [ 543.438651][T24014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5221'. [ 543.539352][T24021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.989984][T24031] xt_limit: Overflow, try lower: 271964/0 [ 544.028220][T24033] netlink: 'syz.5.5228': attribute type 24 has an invalid length. [ 544.185709][T24045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5231'. [ 544.345432][T24058] xt_policy: output policy not valid in PREROUTING and INPUT [ 544.619609][T24085] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 544.638118][T24085] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 544.646942][T24083] tipc: Enabled bearer , priority 0 [ 544.658774][T24083] tipc: Resetting bearer [ 544.819523][T24102] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 544.828193][T24102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.841278][T24095] netlink: 'syz.1.5245': attribute type 19 has an invalid length. [ 544.860148][T24098] netlink: 'syz.2.5248': attribute type 10 has an invalid length. [ 545.049993][T24117] team0: No ports can be present during mode change [ 545.169593][T24125] netlink: 'syz.1.5255': attribute type 1 has an invalid length. [ 545.195419][T24125] netlink: 'syz.1.5255': attribute type 2 has an invalid length. [ 545.637985][T24164] syzkaller0: entered promiscuous mode [ 545.684053][T24164] syzkaller0: entered allmulticast mode [ 545.792775][T24170] netem: change failed [ 545.804743][T24170] netem: change failed [ 545.960991][T24187] veth7: entered allmulticast mode [ 546.068824][T24194] __nla_validate_parse: 7 callbacks suppressed [ 546.068841][T24194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5274'. [ 546.207689][T24209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5276'. [ 546.233708][T24209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.356352][T24209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.483214][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5279'. [ 546.531325][T24219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5279'. [ 546.757865][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5284'. [ 546.825926][T24238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5286'. [ 546.833777][T24241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5288'. [ 546.882943][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5289'. [ 547.025443][T24251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5292'. [ 547.113717][T24259] tipc: Started in network mode [ 547.126853][T24262] delete_channel: no stack [ 547.131611][T24259] tipc: Node identity 26c8cffb5d79, cluster identity 4711 [ 547.143789][T24259] tipc: Enabled bearer , priority 0 [ 547.155399][T24259] syzkaller0: entered promiscuous mode [ 547.161047][T24259] syzkaller0: entered allmulticast mode [ 547.225513][T24259] tipc: Resetting bearer [ 547.270115][T24259] tipc: Disabling bearer [ 547.298939][T24273] C: renamed from lo (while UP) [ 547.332399][T24273] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 547.433819][T24291] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5299'. [ 547.449467][T24293] netlink: 'syz.4.5300': attribute type 22 has an invalid length. [ 547.500843][ T9611] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.510851][ T9611] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.538298][ T9611] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.576678][T24297] tipc: Enabled bearer , priority 0 [ 547.793684][T24292] syzkaller0: entered promiscuous mode [ 547.823735][T24309] netlink: 'syz.1.5305': attribute type 12 has an invalid length. [ 547.837543][T24292] syzkaller0: entered allmulticast mode [ 549.458563][T24297] tipc: Resetting bearer [ 549.538189][T24290] tipc: Resetting bearer [ 549.596536][T24290] tipc: Disabling bearer [ 549.597384][T24338] openvswitch: netlink: IP tunnel dst address not specified [ 549.789758][T24354] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 549.798722][T24354] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 549.867797][T24367] netlink: 'syz.6.5316': attribute type 5 has an invalid length. [ 549.966175][T24373] ip6t_srh: unknown srh invflags 4000 [ 550.089851][T24380] IPv6: sit2: Disabled Multicast RS [ 550.107449][T24380] sit2: entered allmulticast mode [ 550.322510][T24394] SET target dimension over the limit! [ 550.659981][T24401] delete_channel: no stack [ 550.739142][T24429] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.746880][T24429] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.821743][T24434] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 550.853481][T24434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.018708][T24443] xt_limit: Overflow, try lower: 271964/0 [ 551.090768][T24451] veth7: entered allmulticast mode [ 551.117222][T24454] __nla_validate_parse: 14 callbacks suppressed [ 551.117237][T24454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5347'. [ 551.182466][T24458] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5348'. [ 551.330685][T24468] netlink: 'syz.5.5353': attribute type 10 has an invalid length. [ 551.380172][T24468] team0: Port device dummy0 added [ 551.383463][T24473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5355'. [ 551.533613][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5357'. [ 551.541093][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5360'. [ 551.694678][T24500] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 551.728143][T24500] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 551.751444][T24500] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.786241][T24500] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 551.822563][T24502] netlink: 'syz.4.5363': attribute type 11 has an invalid length. [ 551.832453][T24502] netlink: 'syz.4.5363': attribute type 11 has an invalid length. [ 551.842939][T24502] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5363'. [ 551.878236][T24500] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 551.905107][T24500] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 551.922943][T24500] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.947523][T24500] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 552.048800][T24521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5367'. [ 552.050675][T24500] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 552.087477][T24500] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 552.118785][T24500] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.145681][T24500] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 552.254728][T24500] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 552.285907][T24500] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 552.299407][T24500] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.334990][T24500] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 552.360762][T24540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5371'. [ 552.423788][T24539] syzkaller0: entered promiscuous mode [ 552.433921][T24539] syzkaller0: entered allmulticast mode [ 552.440136][T24544] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5375'. [ 552.469796][T24544] 1{X: renamed from 30{X (while UP) [ 552.478938][T24544] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 552.567494][T10407] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.581515][T10407] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 552.618430][T10407] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 552.628227][T10407] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 552.687038][ T9634] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.704715][ T9634] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 552.723095][ T9634] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 552.742682][ T9634] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 552.772996][ T9634] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.791890][ T9634] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 552.809467][ T9634] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 552.842034][ T9634] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 552.913132][ T1094] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.944469][ T1094] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 552.952672][ T1094] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 552.985785][ T1094] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 553.050000][T24580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5387'. [ 553.089023][T24580] bond8: Invalid ad_actor_system MAC address. [ 553.096509][T24580] bond8: option ad_actor_system: invalid value (1) [ 553.106360][T24580] bond8 (unregistering): Released all slaves [ 553.207250][T24589] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 553.292578][T24589] geneve3: entered promiscuous mode [ 553.301214][T24602] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 553.302348][T24589] geneve3: entered allmulticast mode [ 553.355327][ T9634] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 553.383355][ T9634] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 553.416286][ T9634] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 553.463396][ T9634] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 553.862906][T24642] netlink: 'syz.2.5408': attribute type 29 has an invalid length. [ 553.946449][T24656] netlink: 'syz.2.5408': attribute type 29 has an invalid length. [ 554.048991][T24660] netlink: 'syz.5.5409': attribute type 4 has an invalid length. [ 554.100778][T24654] netlink: 'syz.5.5409': attribute type 4 has an invalid length. [ 554.501330][T24694] netlink: 'syz.5.5419': attribute type 12 has an invalid length. [ 554.513234][T24694] netlink: 'syz.5.5419': attribute type 29 has an invalid length. [ 555.062663][T24736] geneve0: mtu less than device minimum [ 555.417320][T24749] netlink: 'syz.2.5428': attribute type 1 has an invalid length. [ 555.577687][T24761] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 556.143281][T24797] netlink: 'syz.6.5437': attribute type 21 has an invalid length. [ 556.283491][T24802] __nla_validate_parse: 11 callbacks suppressed [ 556.283507][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5439'. [ 556.411834][T24811] xt_ipcomp: unknown flags 1D [ 556.661209][T24825] batadv_slave_0: entered promiscuous mode [ 556.671262][T24825] batadv_slave_0: entered allmulticast mode [ 556.955940][T24839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5451'. [ 557.079126][T24846] netlink: 'syz.5.5453': attribute type 21 has an invalid length. [ 557.107773][T24839] netlink: 'syz.4.5451': attribute type 13 has an invalid length. [ 557.680485][T24875] x_tables: duplicate underflow at hook 2 [ 557.831166][T24878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5460'. [ 557.840199][T24882] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5461'. [ 557.862332][T24882] 1{X: left allmulticast mode [ 557.921410][T24889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5462'. [ 557.941842][T24889] openvswitch: netlink: Flow actions attr not present in new flow. [ 557.950593][T24890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 557.975563][T24890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 558.011884][T24890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 558.022639][T24889] wg1 speed is unknown, defaulting to 1000 [ 558.039192][T24890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 558.092337][T24890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 558.380167][T24902] pim6reg1: entered promiscuous mode [ 558.396049][T24902] pim6reg1: entered allmulticast mode [ 558.512827][T24903] veth11: entered promiscuous mode [ 558.682464][T24928] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 558.862265][T24934] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 558.906999][T24934] bond3 (unregistering): Released all slaves [ 558.992575][T24949] validate_nla: 3 callbacks suppressed [ 558.992592][T24949] netlink: 'syz.4.5479': attribute type 1 has an invalid length. [ 559.325240][T24967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.345667][T24960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.352031][T24949] 8021q: adding VLAN 0 to HW filter on device bond8 [ 559.367015][T24967] netlink: 'syz.6.5483': attribute type 11 has an invalid length. [ 559.815596][T24991] 8021q: VLANs not supported on ip6_vti0 [ 560.677538][T25015] team0: Device gtp0 is of different type [ 560.821348][T25018] netlink: 'syz.1.5497': attribute type 29 has an invalid length. [ 560.847255][T25025] tipc: Enabling of bearer rejected, already enabled [ 560.921804][T25025] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 560.971928][T25025] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 561.189176][T25058] tipc: Enabling of bearer rejected, already enabled [ 561.228849][T25058] syzkaller0: mtu less than device minimum [ 561.736101][T25096] 8021q: adding VLAN 0 to HW filter on device bond9 [ 562.232242][T25136] __nla_validate_parse: 67 callbacks suppressed [ 562.232260][T25136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5532'. [ 562.443022][T25151] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5531'. [ 562.540992][T25156] netlink: 'syz.5.5536': attribute type 11 has an invalid length. [ 562.570827][T25156] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5536'. [ 562.717500][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5543'. [ 563.183040][T25212] lo: entered promiscuous mode [ 563.203743][T25212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.243287][T25217] netlink: 'syz.5.5553': attribute type 1 has an invalid length. [ 563.412727][T25229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5557'. [ 563.415796][T25232] xt_hashlimit: size too large, truncated to 1048576 [ 563.431432][T25230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5555'. [ 563.440915][T25229] netlink: 'syz.4.5557': attribute type 7 has an invalid length. [ 563.459544][T25229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5557'. [ 564.121506][T25216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.339052][T25230] netlink: 'syz.1.5555': attribute type 1 has an invalid length. [ 564.386802][T10401] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.414627][T10401] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 564.422994][T10401] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 564.462826][T10401] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.475450][T10401] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 19999 - 0 [ 564.485708][T10401] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.494988][T10401] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 564.505263][T10401] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 564.513698][T10401] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.522604][T10401] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 564.532265][T10401] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.541044][T10401] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 564.585813][T25257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5562'. [ 564.591166][T10401] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 564.606720][T10401] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.619402][T10401] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 564.628479][T10401] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.639410][T10401] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 564.647997][T10401] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 564.694538][T10401] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.713211][T25264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5563'. [ 564.724469][T10401] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 19999 - 0 [ 564.835890][T25276] netlink: 'syz.1.5568': attribute type 4 has an invalid length. [ 564.850706][T25276] netlink: 380 bytes leftover after parsing attributes in process `syz.1.5568'. [ 565.511310][T25323] x_tables: duplicate underflow at hook 1 [ 565.693690][T25331] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20000 [ 566.050887][T25353] sch_fq: defrate 0 ignored. [ 566.281831][T25362] syz.6.5593 (25362) used greatest stack depth: 17800 bytes left [ 566.441325][T25383] netlink: 'syz.4.5601': attribute type 5 has an invalid length. [ 566.448171][T25374] syz.1.5597: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 566.517944][T25374] CPU: 1 UID: 0 PID: 25374 Comm: syz.1.5597 Not tainted syzkaller #0 PREEMPT(full) [ 566.517968][T25374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.517979][T25374] Call Trace: [ 566.517986][T25374] [ 566.517993][T25374] dump_stack_lvl+0x189/0x250 [ 566.518023][T25374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.518046][T25374] ? __pfx__printk+0x10/0x10 [ 566.518064][T25374] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 566.518087][T25374] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 566.518113][T25374] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 566.518139][T25374] warn_alloc+0x214/0x310 [ 566.518170][T25374] ? __pfx_warn_alloc+0x10/0x10 [ 566.518203][T25374] ? __get_vm_area_node+0x28f/0x300 [ 566.518227][T25374] ? xskq_create+0xbf/0x170 [ 566.518262][T25374] __vmalloc_node_range_noprof+0x690/0x12d0 [ 566.518318][T25374] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 566.518346][T25374] ? __kasan_kmalloc+0x93/0xb0 [ 566.518377][T25374] vmalloc_user_noprof+0xad/0xf0 [ 566.518400][T25374] ? xskq_create+0xbf/0x170 [ 566.518422][T25374] xskq_create+0xbf/0x170 [ 566.518446][T25374] xsk_init_queue+0xb0/0x110 [ 566.518471][T25374] xsk_setsockopt+0x57b/0x8d0 [ 566.518494][T25374] ? __pfx_xsk_setsockopt+0x10/0x10 [ 566.518518][T25374] ? __pfx_aa_sk_perm+0x10/0x10 [ 566.518543][T25374] ? aa_sock_opt_perm+0xff/0x1b0 [ 566.518571][T25374] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 566.518587][T25374] ? __pfx_xsk_setsockopt+0x10/0x10 [ 566.518609][T25374] do_sock_setsockopt+0x17c/0x1b0 [ 566.518632][T25374] __x64_sys_setsockopt+0x13f/0x1b0 [ 566.518656][T25374] do_syscall_64+0xfa/0xfa0 [ 566.518677][T25374] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.518700][T25374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.518718][T25374] ? clear_bhb_loop+0x60/0xb0 [ 566.518739][T25374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.518756][T25374] RIP: 0033:0x7f4253f8f6c9 [ 566.518774][T25374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.518789][T25374] RSP: 002b:00007f4254ddd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 566.518808][T25374] RAX: ffffffffffffffda RBX: 00007f42541e5fa0 RCX: 00007f4253f8f6c9 [ 566.518821][T25374] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 566.518831][T25374] RBP: 00007f4254011f91 R08: 0000000000000004 R09: 0000000000000000 [ 566.518841][T25374] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 566.518851][T25374] R13: 00007f42541e6038 R14: 00007f42541e5fa0 R15: 00007ffe79a047b8 [ 566.518880][T25374] [ 566.518887][T25374] Mem-Info: [ 566.643402][T25393] ip6tnl0: Caught tx_queue_len zero misconfig [ 566.654077][T25374] active_anon:4445 inactive_anon:0 isolated_anon:0 [ 566.654077][T25374] active_file:3532 inactive_file:40049 isolated_file:0 [ 566.654077][T25374] unevictable:768 dirty:118 writeback:0 [ 566.654077][T25374] slab_reclaimable:12814 slab_unreclaimable:120456 [ 566.654077][T25374] mapped:29171 shmem:1358 pagetables:1276 [ 566.654077][T25374] sec_pagetables:0 bounce:0 [ 566.654077][T25374] kernel_misc_reclaimable:0 [ 566.654077][T25374] free:1296582 free_pcp:15226 free_cma:0 [ 566.865641][T25390] lo: Caught tx_queue_len zero misconfig [ 566.883072][T25374] Node 0 active_anon:17944kB inactive_anon:0kB active_file:14128kB inactive_file:160004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116568kB dirty:496kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16596kB pagetables:4956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 566.917539][T25374] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 566.957110][T25374] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.991811][T25374] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 567.000187][T25374] Node 0 DMA32 free:1273556kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17644kB inactive_anon:0kB active_file:14128kB inactive_file:160004kB unevictable:1536kB writepending:496kB zspages:0kB present:3129332kB managed:2565164kB mlocked:0kB bounce:0kB free_pcp:44464kB local_pcp:19200kB free_cma:0kB [ 567.056158][T25374] lowmem_reserve[]: 0 0 0 0 0 [ 567.060990][T25374] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.101575][T25374] lowmem_reserve[]: 0 0 0 0 0 [ 567.106559][T25374] Node 1 Normal free:3897848kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15276kB local_pcp:6048kB free_cma:0kB [ 567.207785][T25374] lowmem_reserve[]: 0 0 0 0 0 [ 567.212714][T25374] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 567.274830][T25374] Node 0 DMA32: 1111*4kB (UME) 968*8kB (UME) 291*16kB (UME) 632*32kB (UME) 148*64kB (UME) 113*128kB (UME) 637*256kB (UME) 443*512kB (UME) 224*1024kB (UME) 4*2048kB (UME) 143*4096kB (UM) = 1274188kB [ 567.307506][T25374] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 567.345242][T25374] Node 1 Normal: 184*4kB (UME) 59*8kB (UME) 54*16kB (UME) 189*32kB (UME) 45*64kB (UME) 10*128kB (UME) 6*256kB (UME) 4*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3897848kB [ 567.388684][T25374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.524650][T25374] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 567.693955][T25374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.703541][T25374] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 567.834271][T25374] 44990 total pagecache pages [ 567.838986][T25374] 0 pages in swap cache [ 567.843130][T25374] Free swap = 124996kB [ 567.963933][T25374] Total swap = 124996kB [ 567.968143][T25374] 2097051 pages RAM [ 567.971944][T25374] 0 pages HighMem/MovableOnly [ 568.093941][T25374] 424118 pages reserved [ 568.098132][T25374] 0 pages cma reserved [ 574.504047][T20145] page_pool_release_retry() stalled pool shutdown: id 103, 2 inflight 60 sec [ 584.574690][ T9078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 584.598096][ T9078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 584.606426][ T9078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 584.614822][ T9078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 584.622692][ T9078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 584.646379][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 584.669375][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 584.683848][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 584.707823][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 584.727002][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 584.842637][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 584.863615][T25451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 584.874910][T25451] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 584.896540][T25451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 584.897356][T25458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 584.905516][T25451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 584.914309][T25458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 584.920063][T25451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 584.928092][T25458] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 584.940216][T25458] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 584.948402][T25451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 584.956814][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 584.966252][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 584.974999][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 584.982465][T25458] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 584.991236][T25459] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 584.999954][ T9078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.018859][T25458] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.033322][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.041780][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 585.142782][T25445] wg1 speed is unknown, defaulting to 1000 [ 585.173811][T25448] wg1 speed is unknown, defaulting to 1000 [ 585.190798][T25447] wg1 speed is unknown, defaulting to 1000 [ 585.199628][T25455] wg1 speed is unknown, defaulting to 1000 [ 585.217286][T25452] wg1 speed is unknown, defaulting to 1000 [ 585.581555][ T9616] bridge_slave_1: left allmulticast mode [ 585.587954][ T9616] bridge_slave_1: left promiscuous mode [ 585.593720][ T9616] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.604346][ T9616] bridge_slave_0: left allmulticast mode [ 585.609995][ T9616] bridge_slave_0: left promiscuous mode [ 585.616564][ T9616] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.559526][ T9616] bond7 (unregistering): (slave geneve2): Releasing active interface [ 586.578715][ T9616] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 586.587359][ T9616] geneve1 (unregistering): left promiscuous mode [ 586.824050][T25454] Bluetooth: hci1: command tx timeout [ 586.912915][ T9616] bond0 (unregistering): left promiscuous mode [ 586.919329][ T9616] bond_slave_0: left promiscuous mode [ 586.925474][ T9616] bond_slave_1: left promiscuous mode [ 586.932056][ T9616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.942307][ T9616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.952167][ T9616] bond0 (unregistering): Released all slaves [ 586.987961][T25454] Bluetooth: hci0: command tx timeout [ 587.049888][ T9616] bond1 (unregistering): (slave veth3): Releasing active interface [ 587.058897][ T9616] bond1 (unregistering): Released all slaves [ 587.065538][T25454] Bluetooth: hci3: command tx timeout [ 587.079289][T25454] Bluetooth: hci2: command tx timeout [ 587.148702][T25454] Bluetooth: hci4: command tx timeout [ 587.166050][ T9616] bond2 (unregistering): Released all slaves [ 587.178411][ T9616] bond3 (unregistering): Released all slaves [ 587.271241][ T9616] bond4 (unregistering): Released all slaves [ 587.360541][ T9616] bond5 (unregistering): Released all slaves [ 587.372629][ T9616] bond6 (unregistering): Released all slaves [ 587.384945][ T9616] bond7 (unregistering): Released all slaves [ 587.397652][ T9616] bond8 (unregistering): Released all slaves [ 587.415069][ T9616] bond9 (unregistering): Released all slaves [ 587.462665][T25445] chnl_net:caif_netlink_parms(): no params data found [ 587.571033][ T9616] tipc: Disabling bearer [ 587.588985][ T9616] tipc: Left network mode [ 587.757379][T25445] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.764773][T25445] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.771949][T25445] bridge_slave_0: entered allmulticast mode [ 587.780223][T25445] bridge_slave_0: entered promiscuous mode [ 587.822937][T25445] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.831237][T25445] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.838923][T25445] bridge_slave_1: entered allmulticast mode [ 587.847819][T25445] bridge_slave_1: entered promiscuous mode [ 588.009739][T25445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.085044][T25445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.138706][T25448] chnl_net:caif_netlink_parms(): no params data found [ 588.201766][T25445] team0: Port device team_slave_0 added [ 588.229023][T25445] team0: Port device team_slave_1 added [ 588.367965][T25455] chnl_net:caif_netlink_parms(): no params data found [ 588.392536][ T9616] batadv0: left promiscuous mode [ 588.401344][ T9616] hsr_slave_0: left promiscuous mode [ 588.407585][ T9616] hsr_slave_1: left promiscuous mode [ 588.413386][ T9616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.421523][ T9616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.547100][ T9611] smc: removing ib device syz0 [ 588.723623][ T9616] team0 (unregistering): Port device team_slave_1 removed [ 588.759477][ T9616] team0 (unregistering): Port device team_slave_0 removed [ 588.917817][T25454] Bluetooth: hci1: command tx timeout [ 589.065691][T25454] Bluetooth: hci0: command tx timeout [ 589.077182][ T7368] ================================================================== [ 589.085259][ T7368] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 589.094024][ T7368] Read of size 8 at addr ffff88805a1f82e8 by task kworker/1:10/7368 [ 589.101990][ T7368] [ 589.104308][ T7368] CPU: 1 UID: 0 PID: 7368 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc [ 589.104329][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.104342][ T7368] Workqueue: events smc_ib_port_event_work [ 589.104367][ T7368] Call Trace: [ 589.104374][ T7368] [ 589.104383][ T7368] dump_stack_lvl+0x189/0x250 [ 589.104405][ T7368] ? rcu_is_watching+0x15/0xb0 [ 589.104422][ T7368] ? __kasan_check_byte+0x12/0x40 [ 589.104439][ T7368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.104459][ T7368] ? rcu_is_watching+0x15/0xb0 [ 589.104478][ T7368] ? lock_release+0x4b/0x3e0 [ 589.104497][ T7368] ? __virt_addr_valid+0x1c8/0x5c0 [ 589.104517][ T7368] ? __virt_addr_valid+0x4a5/0x5c0 [ 589.104539][ T7368] print_report+0xca/0x240 [ 589.104559][ T7368] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 589.104576][ T7368] kasan_report+0x118/0x150 [ 589.104593][ T7368] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 589.104616][ T7368] __ethtool_get_link_ksettings+0x6e/0x190 [ 589.104636][ T7368] ib_get_eth_speed+0x15e/0x7b0 [ 589.104659][ T7368] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 589.104684][ T7368] ? do_raw_spin_unlock+0x122/0x240 [ 589.104707][ T7368] rxe_query_port+0x93/0x3b0 [ 589.104721][ T7368] ib_query_port+0x170/0x830 [ 589.104736][ T7368] smc_ib_port_event_work+0x15a/0x940 [ 589.104751][ T7368] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.104764][ T7368] ? process_scheduled_works+0x9ef/0x17b0 [ 589.104774][ T7368] ? process_scheduled_works+0x9ef/0x17b0 [ 589.104784][ T7368] process_scheduled_works+0xae1/0x17b0 [ 589.104800][ T7368] ? __pfx_process_scheduled_works+0x10/0x10 [ 589.104814][ T7368] worker_thread+0x8a0/0xda0 [ 589.104829][ T7368] kthread+0x711/0x8a0 [ 589.104842][ T7368] ? __pfx_worker_thread+0x10/0x10 [ 589.104852][ T7368] ? __pfx_kthread+0x10/0x10 [ 589.104864][ T7368] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.104875][ T7368] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.104887][ T7368] ? __pfx_kthread+0x10/0x10 [ 589.104899][ T7368] ret_from_fork+0x4bc/0x870 [ 589.104909][ T7368] ? __pfx_ret_from_fork+0x10/0x10 [ 589.104920][ T7368] ? __switch_to_asm+0x39/0x70 [ 589.104928][ T7368] ? __switch_to_asm+0x33/0x70 [ 589.104935][ T7368] ? __pfx_kthread+0x10/0x10 [ 589.104947][ T7368] ret_from_fork_asm+0x1a/0x30 [ 589.104959][ T7368] [ 589.104962][ T7368] [ 589.326235][ T7368] Allocated by task 16653: [ 589.330632][ T7368] kasan_save_track+0x3e/0x80 [ 589.335296][ T7368] __kasan_kmalloc+0x93/0xb0 [ 589.339873][ T7368] __kvmalloc_node_noprof+0x5cd/0x910 [ 589.345229][ T7368] alloc_netdev_mqs+0xa6/0x11b0 [ 589.350065][ T7368] rtnl_create_link+0x31f/0xd10 [ 589.354897][ T7368] rtnl_newlink_create+0x25c/0xb00 [ 589.359987][ T7368] rtnl_newlink+0x16e4/0x1c80 [ 589.364648][ T7368] rtnetlink_rcv_msg+0x7cf/0xb70 [ 589.369568][ T7368] netlink_rcv_skb+0x208/0x470 [ 589.374321][ T7368] netlink_unicast+0x82f/0x9e0 [ 589.379077][ T7368] netlink_sendmsg+0x805/0xb30 [ 589.383817][ T7368] __sock_sendmsg+0x21c/0x270 [ 589.388477][ T7368] __sys_sendto+0x3bd/0x520 [ 589.392959][ T7368] __x64_sys_sendto+0xde/0x100 [ 589.397700][ T7368] do_syscall_64+0xfa/0xfa0 [ 589.402187][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.408060][ T7368] [ 589.410364][ T7368] Freed by task 9616: [ 589.414328][ T7368] kasan_save_track+0x3e/0x80 [ 589.419002][ T7368] __kasan_save_free_info+0x46/0x50 [ 589.424185][ T7368] __kasan_slab_free+0x5c/0x80 [ 589.428964][ T7368] kfree+0x19a/0x6d0 [ 589.432843][ T7368] device_release+0x9c/0x1c0 [ 589.437415][ T7368] kobject_put+0x22b/0x480 [ 589.441814][ T7368] netdev_run_todo+0xd2e/0xea0 [ 589.446557][ T7368] default_device_exit_batch+0x81e/0x890 [ 589.452175][ T7368] ops_undo_list+0x525/0x990 [ 589.456746][ T7368] cleanup_net+0x4d8/0x820 [ 589.461146][ T7368] process_scheduled_works+0xae1/0x17b0 [ 589.466672][ T7368] worker_thread+0x8a0/0xda0 [ 589.471250][ T7368] kthread+0x711/0x8a0 [ 589.475302][ T7368] ret_from_fork+0x4bc/0x870 [ 589.479870][ T7368] ret_from_fork_asm+0x1a/0x30 [ 589.484608][ T7368] [ 589.486914][ T7368] The buggy address belongs to the object at ffff88805a1f8000 [ 589.486914][ T7368] which belongs to the cache kmalloc-cg-4k of size 4096 [ 589.501202][ T7368] The buggy address is located 744 bytes inside of [ 589.501202][ T7368] freed 4096-byte region [ffff88805a1f8000, ffff88805a1f9000) [ 589.515067][ T7368] [ 589.517373][ T7368] The buggy address belongs to the physical page: [ 589.523774][ T7368] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a1f8 [ 589.532516][ T7368] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 589.540989][ T7368] memcg:ffff888082a2bd81 [ 589.545205][ T7368] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 589.552738][ T7368] page_type: f5(slab) [ 589.556711][ T7368] raw: 00fff00000000040 ffff88801a030500 dead000000000122 0000000000000000 [ 589.565284][ T7368] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888082a2bd81 [ 589.573856][ T7368] head: 00fff00000000040 ffff88801a030500 dead000000000122 0000000000000000 [ 589.582510][ T7368] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888082a2bd81 [ 589.591164][ T7368] head: 00fff00000000003 ffffea0001687e01 00000000ffffffff 00000000ffffffff [ 589.599818][ T7368] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 589.608467][ T7368] page dumped because: kasan: bad access detected [ 589.614875][ T7368] page_owner tracks the page as allocated [ 589.620570][ T7368] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16653, tgid 16653 (syz-executor), ts 405612830315, free_ts 405604561245 [ 589.644002][ T7368] post_alloc_hook+0x240/0x2a0 [ 589.648773][ T7368] get_page_from_freelist+0x2365/0x2440 [ 589.654301][ T7368] __alloc_frozen_pages_noprof+0x181/0x370 [ 589.660099][ T7368] alloc_pages_mpol+0x232/0x4a0 [ 589.664931][ T7368] allocate_slab+0x96/0x350 [ 589.669420][ T7368] ___slab_alloc+0xe94/0x18a0 [ 589.674080][ T7368] __slab_alloc+0x65/0x100 [ 589.678484][ T7368] __kvmalloc_node_noprof+0x6ba/0x910 [ 589.683842][ T7368] alloc_netdev_mqs+0xa6/0x11b0 [ 589.688683][ T7368] rtnl_create_link+0x31f/0xd10 [ 589.693517][ T7368] rtnl_newlink_create+0x25c/0xb00 [ 589.698607][ T7368] rtnl_newlink+0x16e4/0x1c80 [ 589.703271][ T7368] rtnetlink_rcv_msg+0x7cf/0xb70 [ 589.708194][ T7368] netlink_rcv_skb+0x208/0x470 [ 589.712950][ T7368] netlink_unicast+0x82f/0x9e0 [ 589.717705][ T7368] netlink_sendmsg+0x805/0xb30 [ 589.722450][ T7368] page last free pid 16653 tgid 16653 stack trace: [ 589.728925][ T7368] __free_frozen_pages+0xbc4/0xd30 [ 589.734033][ T7368] __put_partials+0x146/0x170 [ 589.738696][ T7368] put_cpu_partial+0x1f2/0x2e0 [ 589.743443][ T7368] __slab_free+0x2b9/0x390 [ 589.747845][ T7368] qlist_free_all+0x97/0x140 [ 589.752420][ T7368] kasan_quarantine_reduce+0x148/0x160 [ 589.757860][ T7368] __kasan_slab_alloc+0x22/0x80 [ 589.762697][ T7368] __kvmalloc_node_noprof+0x577/0x910 [ 589.768054][ T7368] alloc_netdev_mqs+0xa6/0x11b0 [ 589.772888][ T7368] rtnl_create_link+0x31f/0xd10 [ 589.777721][ T7368] rtnl_newlink_create+0x25c/0xb00 [ 589.782814][ T7368] rtnl_newlink+0x16e4/0x1c80 [ 589.787476][ T7368] rtnetlink_rcv_msg+0x7cf/0xb70 [ 589.792403][ T7368] netlink_rcv_skb+0x208/0x470 [ 589.797153][ T7368] netlink_unicast+0x82f/0x9e0 [ 589.802253][ T7368] netlink_sendmsg+0x805/0xb30 [ 589.807000][ T7368] [ 589.809305][ T7368] Memory state around the buggy address: [ 589.814911][ T7368] ffff88805a1f8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.822956][ T7368] ffff88805a1f8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.830994][ T7368] >ffff88805a1f8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.839035][ T7368] ^ [ 589.846467][ T7368] ffff88805a1f8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.854507][ T7368] ffff88805a1f8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 589.862542][ T7368] ================================================================== [ 589.880986][T25454] Bluetooth: hci2: command tx timeout [ 589.881006][ T5831] Bluetooth: hci3: command tx timeout [ 589.886435][T25454] Bluetooth: hci4: command tx timeout [ 589.894783][ T7368] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 589.894800][ T7368] CPU: 1 UID: 0 PID: 7368 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT(full) [ 589.894820][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.894832][ T7368] Workqueue: events smc_ib_port_event_work [ 589.894859][ T7368] Call Trace: [ 589.894866][ T7368] [ 589.894874][ T7368] dump_stack_lvl+0x99/0x250 [ 589.894897][ T7368] ? __asan_memcpy+0x40/0x70 [ 589.894919][ T7368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.894940][ T7368] ? __pfx__printk+0x10/0x10 [ 589.894970][ T7368] vpanic+0x237/0x6d0 [ 589.894992][ T7368] ? __pfx_vpanic+0x10/0x10 [ 589.895013][ T7368] ? preempt_schedule+0xae/0xc0 [ 589.895034][ T7368] ? __pfx_preempt_schedule+0x10/0x10 [ 589.895058][ T7368] panic+0xb9/0xc0 [ 589.895079][ T7368] ? __pfx_panic+0x10/0x10 [ 589.895102][ T7368] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 589.895128][ T7368] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 589.895147][ T7368] check_panic_on_warn+0x89/0xb0 [ 589.895170][ T7368] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 589.895189][ T7368] end_report+0x78/0x160 [ 589.895204][ T7368] kasan_report+0x129/0x150 [ 589.895221][ T7368] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 589.895244][ T7368] __ethtool_get_link_ksettings+0x6e/0x190 [ 589.895264][ T7368] ib_get_eth_speed+0x15e/0x7b0 [ 589.895288][ T7368] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 589.895315][ T7368] ? do_raw_spin_unlock+0x122/0x240 [ 589.895341][ T7368] rxe_query_port+0x93/0x3b0 [ 589.895363][ T7368] ib_query_port+0x170/0x830 [ 589.895388][ T7368] smc_ib_port_event_work+0x15a/0x940 [ 589.895414][ T7368] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.895433][ T7368] ? process_scheduled_works+0x9ef/0x17b0 [ 589.895452][ T7368] ? process_scheduled_works+0x9ef/0x17b0 [ 589.895470][ T7368] process_scheduled_works+0xae1/0x17b0 [ 589.895500][ T7368] ? __pfx_process_scheduled_works+0x10/0x10 [ 589.895526][ T7368] worker_thread+0x8a0/0xda0 [ 589.895555][ T7368] kthread+0x711/0x8a0 [ 589.895578][ T7368] ? __pfx_worker_thread+0x10/0x10 [ 589.895596][ T7368] ? __pfx_kthread+0x10/0x10 [ 589.895617][ T7368] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.895637][ T7368] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.895658][ T7368] ? __pfx_kthread+0x10/0x10 [ 589.895679][ T7368] ret_from_fork+0x4bc/0x870 [ 589.895698][ T7368] ? __pfx_ret_from_fork+0x10/0x10 [ 589.895718][ T7368] ? __switch_to_asm+0x39/0x70 [ 589.895732][ T7368] ? __switch_to_asm+0x33/0x70 [ 589.895746][ T7368] ? __pfx_kthread+0x10/0x10 [ 589.895767][ T7368] ret_from_fork_asm+0x1a/0x30 [ 589.895790][ T7368] [ 589.897939][ T7368] Kernel Offset: disabled